Misc people fixes:

Set the cgit repos dir to be readable by apache.
Set git context for public_git dirs
Allow cgit to read it's css and such.

roles/cgit/make_pkgs_list/files/make-people-git.sh

@@ -15,3 +15,4 @@ for homedir in /home/fedora/* ; do
 done
 
 cp -f $outfile  $finalfile
+chmod 644 $finalfile

roles/people/files/people.conf

@@ -54,6 +54,10 @@ NameVirtualHost [2610:28:3090:3001:5054:ff:feff:683f]:443
     Require all granted
   </Directory>
 
+  <Directory /usr/share/cgit>
+    Require all granted
+  </Directory>
+
   UserDir public_html
   <Directory /home/fedora/*/public_html>
     AllowOverride FileInfo AuthConfig Limit Indexes

roles/people/tasks/main.yml

@@ -41,6 +41,22 @@
   tags:
   - people
 
+- name: check the selinux context of the users home git dirs
+  command: matchpathcon "/home/fedora/(/.*)/public_git(/.*)?"
+  register: gitcontext
+  always_run: yes
+  changed_when: false
+  tags:
+  - config
+  - selinux
+
+- name: set the SELinux policy for the users home git dirs
+  command: semanage fcontext -a -t git_user_content_t "/home/fedora/(/.*)/public_git(/.*)?"
+  when: distgitcontext.stdout.find('git_user_content_t') == -1
+  tags:
+  - config
+  - selinux
+
 #
 # This sets the default, it's safe to always run. 
 # Default quota for users is 2gb