From eab4f5746a69783e4e3a3c05808ab58b5d2f494d Mon Sep 17 00:00:00 2001 From: Miguel Dalberto Pedro Date: Thu, 29 Oct 2026 16:42:44 -0300 Subject: feat(cgit): deploy cgit, fcgiwrap, and dedicated git SSH server - Enable cgit role (cgit_enabled: true) for git.miguelpedro.xyz.br - Provision dedicated 'git' user/group (/srv/git, git-shell, authorized_keys) - Add custom git-shell commands ('init' and 'list') for remote bare repo creation - Configure /etc/cgitrc with HTTP clone support, Pygments syntax highlighting, and README rendering - Add Nginx virtual host with automatic TLS upgrade once Let's Encrypt cert is present - Update DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md per Self-Updating Protocol --- group_vars/all/vars.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'group_vars/all') diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml index 8ecb430..db792fd 100644 --- a/group_vars/all/vars.yml +++ b/group_vars/all/vars.yml @@ -37,8 +37,13 @@ searxng_base_url: "https://{{ searxng_domain }}/" searxng_valkey_url: "valkey://localhost:6379/0" searxng_secret_key: "{{ vault_searxng_secret_key }}" -# Future cgit deployment toggle & defaults -cgit_enabled: false +# cgit & Git server configuration +cgit_enabled: true +cgit_user: git +cgit_group: git cgit_repos_path: /srv/git cgit_title: "Miguel Pedro Git Repositories" cgit_description: "Self-hosted Git repositories powered by cgit" +cgit_enable_http_clone: true +cgit_ssh_authorized_keys: + - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDcBQznFkp2YuQg6zxJ9g/9n3E/byi+z+N3JWRpQu17C migueldalberto.acc@gmail.com" -- cgit v1.2.3