]> Git — Sourcephile - sourcephile-nix.git/blob - servers/mermet/nginx/sourcephile.fr/git.nix
nginx: remove deprecated enableSSL
[sourcephile-nix.git] / servers / mermet / nginx / sourcephile.fr / git.nix
1 { pkgs, lib, config, ... }:
2 let inherit (config) networking;
3 inherit (config.services) gitweb gitolite nginx;
4 domain = "sourcephile.fr";
5 package = pkgs.gitweb.override (lib.optionalAttrs gitweb.gitwebTheme {
6 gitwebTheme = true;
7 });
8 RuntimeDirectory = "gitweb";
9 gitwebSocket = "/run/${RuntimeDirectory}/gitweb.sock";
10 static-custom = pkgs.writeTextFile {
11 name = "static-custom";
12 destination = "/static-custom/style.css";
13 text = ''
14 .project_list {
15 width:100%;
16 }
17 '';
18 };
19 in
20 {
21 services.nginx = {
22 virtualHosts."git" = {
23 serverName = "git.${domain}";
24 serverAliases =
25 map (domainAlias: "git." + domainAlias)
26 config.networking.domainAliases;
27 forceSSL = false;
28 useACMEHost = domain;
29 locations = {
30 "/" = {
31 extraConfig = ''
32 include ${pkgs.nginx}/conf/fastcgi_params;
33 fastcgi_param PATH_INFO $fastcgi_script_name;
34 # NOTE: used by gitweb's pathinfo feature.
35 fastcgi_param GITWEB_CONFIG ${gitweb.gitwebConfigFile};
36 fastcgi_pass unix:${gitwebSocket};
37 '';
38 };
39 "/static/" = {
40 alias = "${pkgs.gitweb}/static/";
41 };
42 "/static-custom/" = {
43 alias = "${static-custom}/static-custom/";
44 };
45 };
46 };
47 };
48 systemd.services.gitweb = {
49 description = "GitWeb FastCGI service";
50 script = "${pkgs.gitweb}/gitweb.cgi --fastcgi --nproc=1";
51 environment = {
52 FCGI_SOCKET_PATH = gitwebSocket;
53 FCGI_SOCKET_PERM = "432"; # decimal of 660 in octal, since current CGI::Fast doesn't use perl's oct()
54 };
55 serviceConfig = {
56 User = gitolite.user;
57 Group = nginx.group;
58 RuntimeDirectory = [ RuntimeDirectory ];
59 Restart = "always";
60 RestartSec = 10;
61 };
62 wantedBy = [ "multi-user.target" ];
63 };
64 services.gitweb = {
65 gitwebTheme = false;
66 projectroot = "${gitolite.dataDir}/repositories";
67 extraConfig = ''
68 use utf8;
69 my $s = $cgi->https() ? "s" : "";
70 @extra_breadcrumbs = (["${networking.domainBase}" => "http''${s}://${domain}"]);
71 $site_name = "Git — Sourcephile";
72 $home_link_str = "git";
73 $projects_list = "${gitolite.dataDir}/projects.list";
74 $projects_list_description_width = 50;
75 $projects_list_group_categories = 1;
76 $default_projects_order = "age";
77 $omit_owner = 1;
78 $export_ok = "git-daemon-export-ok";
79 $prevent_xss = 0;
80 @git_base_url_list =
81 ( "git://git.${domain}"
82 , "git\@git.${domain}:"
83 );
84 # NOTE: more readable URL.
85 $feature{'pathinfo'}{'default'} = [1];
86 @stylesheets = ( "/static/gitweb.css"
87 , "/static-custom/style.css"
88 );
89 $logo = "/static/git-logo.png";
90 $favicon = "/static/git-favicon.png";
91 $javascript = "/static/gitweb.js";
92 $feature{'highlight'}{'default'} = [1];
93 # FIX: gitweb bug: FCGI is not Unicode aware.
94 if ($first_request) {
95 my $enc = Encode::find_encoding('UTF-8');
96 my $org = \&FCGI::Stream::PRINT;
97 no warnings 'redefine';
98 *FCGI::Stream::PRINT = sub {
99 my @OUTPUT = @_;
100 for (my $i = 1; $i < @_; $i++) {
101 $OUTPUT[$i] = $enc->encode($_[$i], Encode::FB_CROAK|Encode::LEAVE_SRC);
102 }
103 @_ = @OUTPUT;
104 goto $org;
105 };
106 };
107 '';
108 };
109 }