diff options
| author | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 16:42:44 -0300 |
|---|---|---|
| committer | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 16:42:44 -0300 |
| commit | eab4f5746a69783e4e3a3c05808ab58b5d2f494d (patch) | |
| tree | ff6e149dccbd5ccc999d9e4f648bed823433ffab /COMMAND_LOG.md | |
| parent | 4b7379914a1865f07b2c54252234cc90158fc253 (diff) | |
| download | my-infra-eab4f5746a69783e4e3a3c05808ab58b5d2f494d.tar.gz my-infra-eab4f5746a69783e4e3a3c05808ab58b5d2f494d.zip | |
- Enable cgit role (cgit_enabled: true) for git.miguelpedro.xyz.br
- Provision dedicated 'git' user/group (/srv/git, git-shell, authorized_keys)
- Add custom git-shell commands ('init' and 'list') for remote bare repo creation
- Configure /etc/cgitrc with HTTP clone support, Pygments syntax highlighting, and README rendering
- Add Nginx virtual host with automatic TLS upgrade once Let's Encrypt cert is present
- Update DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md per Self-Updating Protocol
Diffstat (limited to 'COMMAND_LOG.md')
| -rw-r--r-- | COMMAND_LOG.md | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/COMMAND_LOG.md b/COMMAND_LOG.md index e386d19..c530013 100644 --- a/COMMAND_LOG.md +++ b/COMMAND_LOG.md @@ -593,3 +593,40 @@ vps : ok=28 changed=3 unreachable=0 failed=0 skipped=6 rescued=0 ignored=0 ``` - **Verified 1:1 match (`ok`):** `common` packages, `certbot` timer & certs, `valkey` service, `searxng` user/group/dirs/git/settings.yml/limiter.toml/uwsgi.ini, `nginx.conf`, `default.apps-available/searxng.conf`, and `sites-available/searxng.conf`. - **Expected cleanups flagged (`changed`):** Removing unused `/etc/nginx/sites-enabled/miguelpedro.xyz.br` stub symlink (`example.com`) and trailing blank lines in `/etc/nginx/sites-available/default`. + + +--- + +## 10. cgit & fcgiwrap Deployment and Verification (2026-10-29) +**Pre-flight Check:** +```bash +.venv/bin/ansible-playbook site.yml --check --diff +``` +**Output:** `ok=27 changed=0 failed=0` + +**Apply `cgit` Role:** +```bash +.venv/bin/ansible-playbook site.yml --tags "cgit" --diff +``` +**Output:** `ok=18 changed=16 failed=0` (Installed `cgit`, `fcgiwrap`, `python3-docutils`, `python3-markdown`, `python3-pygments`; created `git` user/group `999:989`; added `www-data` to `git` group; configured `/srv/git` with `02750` and `git-shell-commands`; deployed `/etc/cgitrc` and `/etc/nginx/sites-available/cgit.conf`; reloaded `nginx` and restarted `fcgiwrap`). + +**Health & SSH Verification:** +```bash +ssh root@miguelpedro.xyz.br ' +curl -s -i -H "Host: git.miguelpedro.xyz.br" http://127.0.0.1/ | head -n 35 +curl -s -I -H "Host: git.miguelpedro.xyz.br" http://127.0.0.1/cgit-css/cgit.css +id git; id www-data +' +ssh -o BatchMode=yes git@miguelpedro.xyz.br list +``` +**Output:** +- `http://127.0.0.1/` (`Host: git.miguelpedro.xyz.br`) returned `cgit v1.2.3` HTML (`Miguel Pedro Git Repositories`). +- `/cgit-css/cgit.css` returned `HTTP/1.1 200 OK` (`text/css`, `15112` bytes). +- `uid=999(git) gid=989(git)`, `uid=33(www-data) gid=33(www-data) groups=33(www-data),989(git)`. +- `ssh git@miguelpedro.xyz.br list` connected cleanly via `git-shell` with exit code `0`. + +**Post-Apply Idempotency Check:** +```bash +.venv/bin/ansible-playbook site.yml --check --diff +``` +**Output:** `ok=42 changed=0 unreachable=0 failed=0 skipped=0` |