| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 39 hours | Move git SSH auth out of /srv/git, harden container sshd | Ahmed Abdelhalim | 1 | -7/+22 | |
| Restore (restic --delete) was wiping git's authorized_keys because it lived under the same tree as the backed-up repos, and the backup user couldn't even read it in the first place (0700, permission denied). authorized_keys now lives at /etc/ssh/authorized_keys/git, decoupled from backup/restore entirely. Also add AllowUsers allowlists (pve-lxc-ssh baseline + cgit override) and a Match block restricting the git user to key auth only, no TCP/ agent forwarding or TTY. Co-Authored-By: Claude.ai | |||||
| 4 days | Configure git globals for cgit role | Ahmed Abdelhalim | 1 | -0/+7 | |
| 9 days | Refactor and clean up code | Ahmed Abdelhalim | 1 | -2/+2 | |
| 10 days | Fix pushing to cgit locally | Ahmed Abdelhalim | 1 | -0/+18 | |
| 10 days | Refactor proxy setup on cgit to simplify setup | Ahmed Abdelhalim | 1 | -46/+0 | |
| 11 days | Refactor pve cgit to use generic proxy | Ahmed Abdelhalim | 1 | -8/+52 | |
| This is refactoring the PoC for deploying cgit on pve, to now move to a more standard deployment with dedicated agnonstic proxy role/container | |||||
| 12 days | Fix cgit role install on alpine | Ahmed Abdelhalim | 1 | -0/+7 | |
| 2026-07-07 | Add cgit role with testing of molecule service | Ahmed Abdelhalim | 1 | -0/+58 | |
