diff options
| author | Ahmed Abdelhalim <[email protected]> | 2026-07-26 04:20:09 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2026-07-26 04:20:09 +0200 |
| commit | 0fa75ea8e374b39ac80d3a5e4bed51bb392ba752 (patch) | |
| tree | b62f9ff81c3e1078f3ba217317ff80da557e6c82 /roles/cgit/handlers/main.yml | |
| parent | 19ae38db9c3ce3e1dac4ca8ce454c59a58619100 (diff) | |
Give git user its own home, separate from /srv/git
authorized_keys lived under /srv/git (git's $HOME), the same tree
restic backs up and restores. backup couldn't even read it (0700,
unreadable by the backup user), and restore --delete treated it as
extraneous and deleted it, breaking push access after every restore.
git now gets a normal separate home; clone-prefix in cgitrc serves the
repos dir by absolute path instead of the ~-relative form, since that
relied on $HOME being the repos dir. Drops the sshd_config.d Include/
Match-block/AllowUsers approach tried first — it directly conflicted
with pve-lxc-ssh's sshd_config push, which fully overwrites the file
on every run and has no way to know about cgit's edits.
Co-Authored-By: Claude.ai
Diffstat (limited to 'roles/cgit/handlers/main.yml')
| -rw-r--r-- | roles/cgit/handlers/main.yml | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/roles/cgit/handlers/main.yml b/roles/cgit/handlers/main.yml index 259ae0ea..516733f7 100644 --- a/roles/cgit/handlers/main.yml +++ b/roles/cgit/handlers/main.yml @@ -4,9 +4,3 @@ ansible.builtin.service: name: lighttpd state: restarted - -- name: "Restart sshd" - become: true - ansible.builtin.service: - name: sshd - state: restarted |