From a3ab64f6a262e3bd0da4435729c2e6f9013aad5d Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Mon, 14 Aug 2023 22:11:11 +0200
Subject: gitolite/http: use generic template for vhost

---
 roles/gitolite/http/tasks/main.yml | 49 +++++++++++++++++++++++++++++++++++++-
 1 file changed, 48 insertions(+), 1 deletion(-)

(limited to 'roles/gitolite/http/tasks/main.yml')

diff --git a/roles/gitolite/http/tasks/main.yml b/roles/gitolite/http/tasks/main.yml
index 1006283a..fdc86d66 100644
--- a/roles/gitolite/http/tasks/main.yml
+++ b/roles/gitolite/http/tasks/main.yml
@@ -50,13 +50,60 @@
       src: "{{ gitolite_instances[gitolite_instance].http.logo }}"
       dest: "/usr/local/share/cgit/{{ gitolite_instance }}.png"
 
+  - name: compute nginx location directive for logo
+    set_fact:
+      nginx_locations_logo:
+        '= /logo.png':
+          alias: "/usr/local/share/cgit/{{ gitolite_instance }}.png"
+
+- name: compute nginx locations directives
+  set_fact:
+    nginx_locations_base:
+      '= /':
+        return: "303 /cgit/"
+      '/cgit-css/':
+        alias: "/usr/share/cgit/"
+    nginx_locations_main:
+      '/cgit/':
+        custom: |-
+          include fastcgi_params;
+          fastcgi_split_path_info ^(/cgit)(.*)$;
+
+          fastcgi_param SCRIPT_FILENAME /usr/lib/cgit/cgit.cgi;
+          fastcgi_param PATH_INFO       $fastcgi_path_info;
+          fastcgi_param QUERY_STRING    $args;
+          fastcgi_param HTTP_HOST       $server_name;
+          fastcgi_param CGIT_CONFIG     {{ gitolite_base_path }}/{{ gitolite_instance }}/cgitrc;
+
+          fastcgi_pass unix:/run/fcgiwrap/gitolite-{{ gitolite_instance }}.sock;
+
+- name: compute nginx location directive for git_backend
+  when: "'enable_git_backend' in gitolite_instances[gitolite_instance].http and gitolite_instances[gitolite_instance].http.enable_git_backend"
+  set_fact:
+    nginx_locations_git_backend:
+      '~ ^.*/git-receive-pack$':
+        return: "403"
+      '~ ^.*/(HEAD|info/refs|objects/(info/.*|[0-9a-f]+/[0-9a-f]+|pack/pack-[0-9a-f]+.(pack|idx))|git-upload-pack)$':
+        custom: |-
+          include fastcgi_params;
+
+          fastcgi_param SCRIPT_FILENAME     /usr/lib/git-core/git-http-backend;
+          fastcgi_param PATH_INFO           $uri;
+          fastcgi_param GIT_PROJECT_ROOT    {{ gitolite_base_path }}/{{ gitolite_instance }}/repositories;
+
+          fastcgi_pass unix:/run/fcgiwrap/gitolite-{{ gitolite_instance }}.sock;
+
 - name: install nginx vhost
   vars:
     nginx_vhost:
       name: "gitolite-{{ gitolite_instance }}"
+      template: generic
       tls:
         certificate_provider: "{{ acme_client }}"
       hostnames: "{{ gitolite_instances[gitolite_instance].http.hostnames }}"
-      content: "{{ lookup('template', 'nginx-vhost.conf.j2') }}"
+      logs:
+        access: "/var/log/nginx/git-{{ gitolite_instance }}_access.log"
+        error: "/var/log/nginx/git-{{ gitolite_instance }}_error.log"
+      locations: "{{ nginx_locations_base | combine(nginx_locations_logo | default({})) | combine(nginx_locations_main) | combine(nginx_locations_git_backend | default({})) }}"
   include_role:
     name: nginx/vhost
-- 
cgit v1.2.3