From e60e99796111ee6d43080b4e48971c08886c0570 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Romain=20Gon=C3=A7alves?= Date: Sat, 11 Dec 2021 13:54:22 +0000 Subject: roles: Add git and cgit roles --- roles/cgit/defaults/main.yml | 18 ++++ roles/cgit/files/about-filter.sh | 3 + roles/cgit/files/generate-static-git.sh | 28 +++++ roles/cgit/files/httpd.conf | 20 ++++ roles/cgit/files/style.css | 155 ++++++++++++++++++++++++++++ roles/cgit/meta/main.yml | 5 + roles/cgit/tasks/main.yml | 53 ++++++++++ roles/cgit/templates/cgitrc.j2 | 39 +++++++ roles/cgit/templates/footer.html.j2 | 3 + roles/cgit/templates/httpd.conf.j2 | 18 ++++ roles/git/defaults/main.yml | 7 ++ roles/git/tasks/main.yml | 45 ++++++++ roles/git/templates/gitconfig.j2 | 2 + roles/git/templates/no-interactive-login.j2 | 7 ++ 14 files changed, 403 insertions(+) create mode 100644 roles/cgit/defaults/main.yml create mode 100644 roles/cgit/files/about-filter.sh create mode 100644 roles/cgit/files/generate-static-git.sh create mode 100644 roles/cgit/files/httpd.conf create mode 100644 roles/cgit/files/style.css create mode 100644 roles/cgit/meta/main.yml create mode 100644 roles/cgit/tasks/main.yml create mode 100644 roles/cgit/templates/cgitrc.j2 create mode 100644 roles/cgit/templates/footer.html.j2 create mode 100644 roles/cgit/templates/httpd.conf.j2 create mode 100644 roles/git/defaults/main.yml create mode 100644 roles/git/tasks/main.yml create mode 100644 roles/git/templates/gitconfig.j2 create mode 100644 roles/git/templates/no-interactive-login.j2 (limited to 'roles') diff --git a/roles/cgit/defaults/main.yml b/roles/cgit/defaults/main.yml new file mode 100644 index 0000000..0c60bd5 --- /dev/null +++ b/roles/cgit/defaults/main.yml @@ -0,0 +1,18 @@ +cgit_instance: cgit +cgit_git_dir: /data/git +cgit_chroot_dir: /var/www + +cgit_ip: 0.0.0.0 +cgit_port: 1235 +cgit_authenticate: false + +cgit__favicon: http://rgoncalves.se/logo.png +cgit__logo: http://rgoncalves.se/logo.png +cgit__css: http://rgoncalves.se/style/cgit.css +cgit__root_desc: development hub +cgit__root_readme: http://rgoncalves.se +cgit__footer: /conf/footer.html +cgit__clone_urls: + - git://git.{{ __global_domain_name }}/$CGIT_REPO_URL + - ssh://git@git.{{ __global_domain_name }}/$CGIT_REPO_URL + - https://git.{{ __global_domain_name }}/$CGIT_REPO_URL diff --git a/roles/cgit/files/about-filter.sh b/roles/cgit/files/about-filter.sh new file mode 100644 index 0000000..6193824 --- /dev/null +++ b/roles/cgit/files/about-filter.sh @@ -0,0 +1,3 @@ +#!/bin/sh + +cat - diff --git a/roles/cgit/files/generate-static-git.sh b/roles/cgit/files/generate-static-git.sh new file mode 100644 index 0000000..dd0db32 --- /dev/null +++ b/roles/cgit/files/generate-static-git.sh @@ -0,0 +1,28 @@ +#!/bin/sh + +GIT_DIR="/data/git" + +repositories="" +repo="" + +for repo in "${GIT_DIR}"/*; do + + if [ ! -f "${repo}/git-daemon-export-ok" ]; then + echo " [ERR] $(basename ${repo})" + continue + fi + + repo=$(basename "${repo}") + repositories="${repositories} ${GIT_DIR}/${repo}" + + echo " [OK ] ${repo}" + mkdir "${repo}" 2>/dev/null + (cd "${repo}" && /usr/local/bin/stagit "${GIT_DIR}/${repo}") +done + +if [ -z "$repositories" ]; then + exit 1 +fi + +echo " [#] ${repositories}" +/usr/local/bin/stagit-index ${repositories} > index.html diff --git a/roles/cgit/files/httpd.conf b/roles/cgit/files/httpd.conf new file mode 100644 index 0000000..238acf0 --- /dev/null +++ b/roles/cgit/files/httpd.conf @@ -0,0 +1,20 @@ + +# httpd ~~ /etc/httpd.conf +# managed by Ansible + +server "default" { + listen on * port 1234 + root "/htdocs/stagit" + + location match "style.css" { + request rewrite "/style.css" + } + + location match "logo.png" { + request rewrite "/logo.png" + } + + location match "favicon.png" { + request rewrite "/logo.png" + } +} diff --git a/roles/cgit/files/style.css b/roles/cgit/files/style.css new file mode 100644 index 0000000..8e24ae9 --- /dev/null +++ b/roles/cgit/files/style.css @@ -0,0 +1,155 @@ +body { + font-family: monospace; + color: #000; + background-color: #fff; +} +img { + border: 0; +} + +h1, h2, h3, h4, h5, h6 { + font-size: 1em; + margin: 0; +} + +img, h1, h2 { + vertical-align: middle; +} + +a:target { + background-color: #ccc; +} + +a.d, +a.h, +a.i, +a.line { + text-decoration: none; +} + +#blob a { + color: #555; + border-right: 3px solid #aaa; + padding: 0 5px 0 0; +} + +#blob a:hover { + color: blue; + text-decoration: none; +} + +table thead td { + font-weight: bold; +} + +table td { + padding: 0 0.4em; +} + +#content table td { + white-space: nowrap; + vertical-align: top; +} + +#branches tr:hover td, +#tags tr:hover td, +#index tr:hover td, +#log tr:hover td, +#files tr:hover td { + background-color: #eee; +} + +#index tr td:nth-child(2), +#tags tr td:nth-child(3), +#branches tr td:nth-child(3), +#log tr td:nth-child(2) { + white-space: normal; +} + +td.num { + text-align: right; +} + +.desc { + color: #555; +} + +hr { + border: 0; + border-top: 3px solid #aaa; + height: 3px; +} + +#content hr { + display: none; +} + +pre { + font-family: monospace; +} + +pre a.h { + color: #00a; +} + +.A, +span.i, +pre a.i { + color: #070; +} + +.D, +span.d, +pre a.d { + color: #e00; +} + +pre a.h:hover, +pre a.i:hover, +pre a.d:hover { + text-decoration: none; +} +/* +@media (prefers-color-scheme: dark) { + body { + background-color: #000; + color: #eee; + } + hr { + border-color: #222; + } + a { + color: #00abff; + } + a:target { + background-color: #222; + } + #blob a { + color: #555; + border-color: #222; + } + #blob a:hover { + color: #00abff; + } + pre a.h { + color: #00abff; + } + .A, + span.i, + pre a.i { + color: #0e0; + } + .D, + span.d, + pre a.d { + color: #e00; + } + #branches tr:hover td, + #tags tr:hover td, + #index tr:hover td, + #log tr:hover td, + #files tr:hover td { + background-color: #111; + } +} +*/ diff --git a/roles/cgit/meta/main.yml b/roles/cgit/meta/main.yml new file mode 100644 index 0000000..a25f289 --- /dev/null +++ b/roles/cgit/meta/main.yml @@ -0,0 +1,5 @@ +dependencies: + - role: git + tags: dependency + - role: httpd_pre + tags: dependency diff --git a/roles/cgit/tasks/main.yml b/roles/cgit/tasks/main.yml new file mode 100644 index 0000000..6040ecf --- /dev/null +++ b/roles/cgit/tasks/main.yml @@ -0,0 +1,53 @@ +- name: install cgit packages + package: + name: + - cgit + - lowdown + state: present + +- name: generate cgit configuration files + template: + src: "{{ item.template }}" + dest: "{{ item.file }}" + owner: 0 + group: 0 + mode: 0644 + loop: + - template: cgitrc.j2 + file: "{{ cgit_chroot_dir }}/conf/cgitrc" + - template: footer.html.j2 + file: "{{ cgit_chroot_dir }}/conf/footer.html" + - template: httpd.conf.j2 + file: /etc/httpd.d/cgit.conf + +- name: copy utilities in httpd chroot + copy: + src: "{{ item }}" + dest: "{{ cgit_chroot_dir }}/bin" + mode: preserve + remote_src: true + loop: + - /bin/sh + - /bin/cat + - /usr/local/bin/lowdown + +- name: copy about-filter generator + copy: + src: about-filter.sh + dest: "{{ cgit_chroot_dir }}/bin/about-filter.sh" + owner: 0 + group: 0 + mode: 0755 + +- name: start and enable slowcgi service + service: + name: slowcgi + state: restarted + enabled: true + +- name: httpd password information + debug: + msg: | + Please provide a password using htpasswd, + in "{{ cgit_chroot_dir }}/htpasswd/cgit" + when: cgit_authenticate diff --git a/roles/cgit/templates/cgitrc.j2 b/roles/cgit/templates/cgitrc.j2 new file mode 100644 index 0000000..40b4b07 --- /dev/null +++ b/roles/cgit/templates/cgitrc.j2 @@ -0,0 +1,39 @@ +# managed by Ansible + +# visuals +css={{ cgit__css }} +logo={{ cgit__logo }} +favicon={{ cgit__favicon }} +footer={{ cgit__footer }} + +# readme +readme=:README.md +readme=:README.org +readme=:README +readme=:.README.md +readme=:.README +about-filter=/bin/about-filter.sh + +# features +enable-commit-graph=1 +enable-http-clone=1 +enable-index-links=1 +max-stats=quarter +robots=noindex, nofollow +localtime=1 + +# git +clone-url={{ cgit__clone_urls | join(' ') }} + +# instance id +root-title=git.{{ __global_domain_name }} +root-desc={{ cgit__root_desc }} +root-readme={{ cgit__root_readme }} + +# archives +snapshots=tar.gz + +# sections +section-from-path=1 +section-sort=1 +scan-path={{ cgit_git_dir }} diff --git a/roles/cgit/templates/footer.html.j2 b/roles/cgit/templates/footer.html.j2 new file mode 100644 index 0000000..66ca627 --- /dev/null +++ b/roles/cgit/templates/footer.html.j2 @@ -0,0 +1,3 @@ + +remember that computers suck. + diff --git a/roles/cgit/templates/httpd.conf.j2 b/roles/cgit/templates/httpd.conf.j2 new file mode 100644 index 0000000..962016a --- /dev/null +++ b/roles/cgit/templates/httpd.conf.j2 @@ -0,0 +1,18 @@ +# managed by Ansible + +server "cgit" { + listen on "{{ cgit_ip }}" port {{ cgit_port }} +{% if cgit_authenticate %} + authenticate "realm" with "/htpasswd/cgit" +{% endif %} + + # cgit + location "/cgit.*" { + root "/cgit" + no fastcgi + } + + # fastcgi + root "/cgi-bin/cgit.cgi" + fastcgi socket "/run/slowcgi.sock" +} diff --git a/roles/git/defaults/main.yml b/roles/git/defaults/main.yml new file mode 100644 index 0000000..f99dec3 --- /dev/null +++ b/roles/git/defaults/main.yml @@ -0,0 +1,7 @@ +git_user: git +git_group: git +git_dir: /data/git + +git_shell: /bin/sh +git_default_branch: trunk +git_allow_ssh_login: true diff --git a/roles/git/tasks/main.yml b/roles/git/tasks/main.yml new file mode 100644 index 0000000..4d2b74e --- /dev/null +++ b/roles/git/tasks/main.yml @@ -0,0 +1,45 @@ +- name: install git package + package: + name: git + state: present + +- name: create git group + group: + name: "{{ git_group }}" + state: present + +- name: create git user + user: + name: "{{ git_user }}" + group: "{{ git_group }}" + shell: "{{ git_shell }}" + home: "{{ git_dir }}" + create_home: false + +- name: create git directories + file: + path: "{{ item }}" + owner: "{{ git_user }}" + group: "{{ git_group }}" + state: directory + mode: 0755 + loop: + - "{{ git_dir }}" + - "{{ git_dir }}/git-shell-commands" + +- name: generate git-shell no-login prompt + template: + src: no-interactive-login.j2 + dest: "{{ git_dir }}/git-shell-commands/no-interactive-login" + owner: "{{ git_user }}" + group: "{{ git_group }}" + mode: "0744" + when: not git_allow_ssh_login + +- name: generate gitconfig + template: + src: gitconfig.j2 + dest: "{{ git_dir }}/.gitconfig" + owner: "{{ git_user }}" + group: "{{ git_group }}" + mode: 0644 diff --git a/roles/git/templates/gitconfig.j2 b/roles/git/templates/gitconfig.j2 new file mode 100644 index 0000000..b9923a2 --- /dev/null +++ b/roles/git/templates/gitconfig.j2 @@ -0,0 +1,2 @@ +[init] + defaultBranch = {{ git_default_branch }} diff --git a/roles/git/templates/no-interactive-login.j2 b/roles/git/templates/no-interactive-login.j2 new file mode 100644 index 0000000..bfe6011 --- /dev/null +++ b/roles/git/templates/no-interactive-login.j2 @@ -0,0 +1,7 @@ +#!/bin/sh + +cat <