1 files changed, 103 insertions, 0 deletions
diff --git a/services/cgit.nix b/services/cgit.nix
new file mode 100644
index 0000000..a7795ac
--- /dev/null
+++ b/services/cgit.nix
@@ -0,0 +1,103 @@
+{ pkgs, fqdn, ... }:
+{
+ services.uwsgi = {
+    enable = true;
+    user  = "public";
+    group = "users";
+    plugins = [ "cgi" ];
+
+    instance = {
+      type = "emperor";
+      vassals = {
+        cgit = {
+          type = "normal";
+          master = "true";
+          socket = "/run/uwsgi/cgit.sock";
+          procname-master = "uwsgi cgit";
+          plugins = [ "cgi" ];
+          cgi = "${pkgs.cgit}/cgit/cgit.cgi";
+        };
+      };
+    };
+  };
+
+  services.gitolite = {
+    enable = true;
+    user  = "git";
+    group = "git";
+    adminPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILhzz/CAb74rLQkDF2weTCb0DICw1oyXNv6XmdLfEsT5 crash@crashoverburn.com";
+    extraGitoliteRc = ''
+      $RC{UMASK} = 0027;
+      $RC{GIT_CONFIG_KEYS} = '.*';
+    '';
+  };
+
+  users.extraUsers.public = 
+  {
+     isSystemUser = true;
+     group = "git";
+  };
+
+  services.nginx.virtualHosts."code.${fqdn}" = {
+    addSSL     = true;
+    enableACME = true;
+    root = "${pkgs.cgit}/cgit";
+    locations = {
+      "/" = {
+        extraConfig = ''
+          try_files $uri @cgit;
+        '';
+      };
+      "@cgit" = {
+        extraConfig = ''
+          uwsgi_pass unix:/run/uwsgi/cgit.sock;
+          include ${pkgs.nginx}/conf/uwsgi_params;
+          uwsgi_modifier1 9;
+        '';
+      };
+    }; 
+  };
+
+  systemd.services.create-cgit-cache = {
+    description = "Create cache directory for cgit";
+    enable = true;
+    wantedBy = [ "uwsgi.service" ];
+    serviceConfig = {
+      type = "oneshot";
+    };
+    script = ''
+      mkdir /run/cgit
+      chown -R public:users /run/cgit
+    '';
+  };
+
+  environment.etc."cgitrc".text = ''
+    virtual-root=/
+
+    cache-size=1000
+    cache-root=/run/cgit
+
+    root-title=~/projects
+    root-desc=code.${fqdn}
+    footer=
+
+    enable-index-owner=0
+    enable-http-clone=1
+    noplainemail=1
+
+    max-atom-items=50
+
+    enable-git-config=1
+    enable-gitweb-owner=1
+    remove-suffix=1
+
+    snapshots=all
+    readme=master:README.md
+
+    source-filter=${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py
+    about-filter=${pkgs.cgit}/lib/cgit/filters/about-formatting.sh
+
+    project-list=/var/lib/gitolite/projects.list
+    scan-path=/var/lib/gitolite/repositories
+  '';
+}