summaryrefslogtreecommitdiffstats
path: root/roles/cgit/tasks
AgeCommit message (Collapse)AuthorFilesLines
39 hoursMove git SSH auth out of /srv/git, harden container sshdAhmed Abdelhalim1-7/+22
Restore (restic --delete) was wiping git's authorized_keys because it lived under the same tree as the backed-up repos, and the backup user couldn't even read it in the first place (0700, permission denied). authorized_keys now lives at /etc/ssh/authorized_keys/git, decoupled from backup/restore entirely. Also add AllowUsers allowlists (pve-lxc-ssh baseline + cgit override) and a Match block restricting the git user to key auth only, no TCP/ agent forwarding or TTY. Co-Authored-By: Claude.ai
4 daysConfigure git globals for cgit roleAhmed Abdelhalim1-0/+7
9 daysRefactor and clean up codeAhmed Abdelhalim1-2/+2
10 daysFix pushing to cgit locallyAhmed Abdelhalim1-0/+18
10 daysRefactor proxy setup on cgit to simplify setupAhmed Abdelhalim1-46/+0
11 daysRefactor pve cgit to use generic proxyAhmed Abdelhalim1-8/+52
This is refactoring the PoC for deploying cgit on pve, to now move to a more standard deployment with dedicated agnonstic proxy role/container
12 daysFix cgit role install on alpineAhmed Abdelhalim1-0/+7
2026-07-07Add cgit role with testing of molecule serviceAhmed Abdelhalim1-0/+58