From eab4f5746a69783e4e3a3c05808ab58b5d2f494d Mon Sep 17 00:00:00 2001
From: Miguel Dalberto Pedro <miguel.pedro@precisioninno.com>
Date: Thu, 29 Oct 2026 16:42:44 -0300
Subject: feat(cgit): deploy cgit, fcgiwrap, and dedicated git SSH server

- Enable cgit role (cgit_enabled: true) for git.miguelpedro.xyz.br
- Provision dedicated 'git' user/group (/srv/git, git-shell, authorized_keys)
- Add custom git-shell commands ('init' and 'list') for remote bare repo creation
- Configure /etc/cgitrc with HTTP clone support, Pygments syntax highlighting, and README rendering
- Add Nginx virtual host with automatic TLS upgrade once Let's Encrypt cert is present
- Update DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md per Self-Updating Protocol
---
 roles/cgit/templates/cgitrc.j2 | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'roles/cgit/templates/cgitrc.j2')

diff --git a/roles/cgit/templates/cgitrc.j2 b/roles/cgit/templates/cgitrc.j2
index 0cae2ab..6e9cbd0 100644
--- a/roles/cgit/templates/cgitrc.j2
+++ b/roles/cgit/templates/cgitrc.j2
@@ -7,11 +7,21 @@ root-title={{ cgit_title }}
 root-desc={{ cgit_description }}
 virtual-root=/
 
+{% if cgit_enable_http_clone | default(true) %}
+enable-http-clone=1
+clone-url=https://{{ cgit_domain }}/$CGIT_REPO_URL git@{{ primary_domain }}:$CGIT_REPO_URL
+{% else %}
+enable-http-clone=0
+clone-url=git@{{ primary_domain }}:$CGIT_REPO_URL
+{% endif %}
+
 enable-index-links=1
 enable-index-owner=0
 enable-commit-graph=1
 enable-log-filecount=1
 enable-log-linecount=1
+enable-git-config=1
+remove-suffix=1
 snapshots=tar.gz zip
 
 about-filter=/usr/lib/cgit/filters/about-formatting.sh
@@ -23,4 +33,5 @@ readme=:README.rst
 readme=:README.txt
 readme=:README
 
+# Scan path must be placed after global repository defaults
 scan-path={{ cgit_repos_path }}
-- 
cgit v1.2.3