From 690f218cbdf89327408ea75f2d21fde257a29411 Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Wed, 26 Aug 2026 10:27:32 +0100
Subject: refactor git into cgit, git-daemon and git-http-backend

---
 roles/git-http-backend/tasks/main.yml | 41 +++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 roles/git-http-backend/tasks/main.yml

(limited to 'roles/git-http-backend/tasks')

diff --git a/roles/git-http-backend/tasks/main.yml b/roles/git-http-backend/tasks/main.yml
new file mode 100644
index 0000000..9dccf60
--- /dev/null
+++ b/roles/git-http-backend/tasks/main.yml
@@ -0,0 +1,41 @@
+- name: Install git
+  community.general.apk:
+    name: git
+
+- name: Create git.joeac.net nginx include directory
+  ansible.builtin.file:
+    path: "{{ git_nginx_include_directory }}"
+    state: directory
+    owner: nginx
+    group: nginx
+
+- name: Install htpasswd file
+  ansible.builtin.copy:
+    src: htpasswd
+    dest: /etc/nginx/.htpasswd
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    mode: "400"
+
+- name: Install git-http-backend nginx directives
+  register: nginx_conf
+  vars:
+    fcgiwrap_socket: /run/fcgiwrap.sock
+  ansible.builtin.template:
+    src: git-http-backend.conf
+    dest: "{{ git_nginx_include_directory }}/git-http-backend.conf"
+    owner: "{{ git_readwrite_user }}"
+    group: "{{ git_readwrite_group }}"
+    mode: "660"
+
+- name: Restart nginx service if config changed
+  when: nginx_conf is changed
+  ansible.builtin.service:
+    name: nginx
+    state: restarted
+
+- name: Mark git directory safe in system-wide git config
+  community.general.git_config:
+    name: safe.directory
+    add_mode: add
+    value: "{{ git_directory }}/*"
-- 
cgit v1.2.3