1 files changed, 41 insertions, 0 deletions
diff --git a/roles/git-http-backend/tasks/main.yml b/roles/git-http-backend/tasks/main.yml
new file mode 100644
index 0000000..9dccf60
--- /dev/null
+++ b/roles/git-http-backend/tasks/main.yml
@@ -0,0 +1,41 @@
+- name: Install git
+  community.general.apk:
+    name: git
+
+- name: Create git.joeac.net nginx include directory
+  ansible.builtin.file:
+    path: "{{ git_nginx_include_directory }}"
+    state: directory
+    owner: nginx
+    group: nginx
+
+- name: Install htpasswd file
+  ansible.builtin.copy:
+    src: htpasswd
+    dest: /etc/nginx/.htpasswd
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    mode: "400"
+
+- name: Install git-http-backend nginx directives
+  register: nginx_conf
+  vars:
+    fcgiwrap_socket: /run/fcgiwrap.sock
+  ansible.builtin.template:
+    src: git-http-backend.conf
+    dest: "{{ git_nginx_include_directory }}/git-http-backend.conf"
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    mode: "660"
+
+- name: Restart nginx service if config changed
+  when: nginx_conf is changed
+  ansible.builtin.service:
+    name: nginx
+    state: restarted
+
+- name: Mark git directory safe in system-wide git config
+  community.general.git_config:
+    name: safe.directory
+    add_mode: add
+    value: "{{ git_directory }}/*"