From 690f218cbdf89327408ea75f2d21fde257a29411 Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Wed, 26 Aug 2026 10:27:32 +0100
Subject: refactor git into cgit, git-daemon and git-http-backend

---
 roles/cgit/tasks/main.yml | 69 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 roles/cgit/tasks/main.yml

(limited to 'roles/cgit/tasks')

diff --git a/roles/cgit/tasks/main.yml b/roles/cgit/tasks/main.yml
new file mode 100644
index 0000000..d9f96bc
--- /dev/null
+++ b/roles/cgit/tasks/main.yml
@@ -0,0 +1,69 @@
+- name: Install cgit
+  community.general.apk:
+    name: cgit
+
+- name: Add git readonly group
+  ansible.builtin.group:
+    name: "{{ git_readonly_group }}"
+
+- name: Configure read-write git user
+  ansible.builtin.user:
+    name: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    groups:
+      - "{{ git_readonly_group }}"
+    append: true
+
+- name: Create git directory in attached storage
+  ansible.builtin.file:
+    path: /media/seagate/git
+    state: directory
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readonly_group }}"
+    mode: "750"
+
+- name: Set owners recursively in git directory in attached storage
+  ansible.builtin.file:
+    path: /media/seagate/git
+    state: directory
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readonly_group }}"
+    recurse: true
+
+- name: Symlink git directory to storage medium
+  ansible.builtin.file:
+    src: /media/seagate/git
+    dest: "{{ git_directory }}"
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readonly_group }}"
+    state: link
+    mode: "750"
+
+- name: Install git.joeac.net nginx site config
+  register: cgit_nginx_site
+  vars:
+    fcgiwrap_socket: /run/fcgiwrap.sock
+  ansible.builtin.template:
+    src: nginx/git.joeac.net.conf
+    dest: /etc/nginx/http.d/git.joeac.net.conf
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    mode: "660"
+
+- name: Create git.joeac.net nginx log directory
+  ansible.builtin.file:
+    path: /var/log/nginx/git.joeac.net
+    state: directory
+
+- name: Restart nginx daemon and configure to start on boot
+  when: cgit_nginx_site is changed
+  ansible.builtin.service:
+    name: nginx
+    enabled: true
+    state: restarted
+
+- name: Install cgit config
+  ansible.builtin.template:
+    src: cgitrc
+    dest: /etc/cgitrc
+    mode: "+r"
-- 
cgit v1.2.3