Files
fedora-infra_ansible/roles/distgit/files/httppush.conf
Patrick Uiterwijk 06c04a3fb9 Commit http push stuff
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-28 15:08:48 +02:00

33 lines
903 B
Plaintext

SetEnv GIT_PROJECT_ROOT /srv/git/repositories
AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/git/repositories/$1
AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/repositories/$1
<Location />
AuthType oauth20
Require all granted
</Location>
<LocationMatch ".*/git-receive-pack">
AuthType oauth20
Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
</LocationMatch>
<LocationMatch "/info/refs">
<If "%{QUERY_STRING} =~ /service=git-upload-pack/">
Require all granted
</If>
<Else>
AuthType oauth20
Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
</Else>
</LocationMatch>
SuexecUserGroup pagure packager
ScriptAliasMatch \
"(?x)^/(.*/(HEAD | \
info/refs | \
objects/info/[^/]+ | \
git-(upload|receive)-pack))$" \
/var/www/bin/gitolite-suexec-wrapper.sh/