From d06a965c13a2588ab85376f5a4809b7dabade7d3 Mon Sep 17 00:00:00 2001 From: Marek Paśnikowski Date: Sun, 14 Jan 2024 09:51:16 +0100 Subject: Set less restrictive umask in gitolite It is not possible to manually control access rights to gitolite repositories with chmod, as each interaction with the git server progressively erases the reading rights for the world. Set a world reading umask in order to allow cgit to see all the git data in repositories. --- izumi.org | 3 ++- system-configuration.scm | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/izumi.org b/izumi.org index 0a9f776..187eaf5 100644 --- a/izumi.org +++ b/izumi.org @@ -592,7 +592,8 @@ ( repository-directory "/var/lib/gitolite/repositories" ) ) ) ( service gitolite-service-type ( gitolite-configuration - ( admin-pubkey gitolite-keys ) ) ) + ( admin-pubkey gitolite-keys ) + ( rc-file ( gitolite-rc-file ( umask #o0022 ) ) ) ) ) ( service gnome-desktop-service-type ) ( service nginx-service-type ( nginx-configuration diff --git a/system-configuration.scm b/system-configuration.scm index a5a3082..4736b7f 100644 --- a/system-configuration.scm +++ b/system-configuration.scm @@ -582,7 +582,8 @@ ( repository-directory "/var/lib/gitolite/repositories" ) ) ) ( service gitolite-service-type ( gitolite-configuration - ( admin-pubkey gitolite-keys ) ) ) + ( admin-pubkey gitolite-keys ) + ( rc-file ( gitolite-rc-file ( umask #o0022 ) ) ) ) ) ( service gnome-desktop-service-type ) ( service nginx-service-type ( nginx-configuration -- cgit v1.2.3