X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/cf875dbc23ee225629984aace574d11c512c9bbe..da307b707a65fb3bc4d4eb3a2dacb9a5a20ecbd0:/cookbooks/git/recipes/server.rb diff --git a/cookbooks/git/recipes/server.rb b/cookbooks/git/recipes/server.rb index c8077a303..81b16952f 100644 --- a/cookbooks/git/recipes/server.rb +++ b/cookbooks/git/recipes/server.rb @@ -8,7 +8,7 @@ # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -18,58 +18,34 @@ # include_recipe "networking" -include_recipe "xinetd" git_directory = node[:git][:directory] directory git_directory do - owner node[:git][:user] - group node[:git][:group] + owner "root" + group "root" + mode 0o775 +end + +directory "#{git_directory}/public" do + owner node[:git][:public_user] + group node[:git][:public_group] mode 0o2775 end -if node[:git][:allowed_nodes] - search(:node, node[:git][:allowed_nodes]).each do |n| - n.interfaces(:role => :external).each do |interface| - firewall_rule "accept-git" do - action :accept - family interface[:family] - source "#{interface[:zone]}:#{interface[:address]}" - dest "fw" - proto "tcp:syn" - dest_ports "git" - source_ports "1024:" - end - end - end -else - firewall_rule "accept-git" do - action :accept - source "net" - dest "fw" - proto "tcp:syn" - dest_ports "git" - source_ports "1024:" - end +directory "#{git_directory}/private" do + owner node[:git][:private_user] + group node[:git][:private_group] + mode 0o2775 end -Dir.new(git_directory).select { |name| name =~ /\.git$/ }.each do |repository| - template "#{git_directory}/#{repository}/hooks/post-update" do +Dir.glob("#{git_directory}/*/*.git").each do |repository| + template "#{repository}/hooks/post-update" do source "post-update.erb" owner "root" group node[:git][:group] mode 0o755 end - - next unless node[:recipes].include?("trac") && repository != "dns.git" && repository != "chef.git" - - template "#{git_directory}/#{repository}/hooks/post-receive" do - source "post-receive.erb" - owner "root" - group node[:git][:group] - mode 0o755 - variables :repository => "#{git_directory}/#{repository}" - end end template "/etc/cron.daily/git-backup" do @@ -78,11 +54,3 @@ template "/etc/cron.daily/git-backup" do group "root" mode 0o755 end - -template "/etc/xinetd.d/git" do - source "xinetd.erb" - owner "root" - group "root" - mode 0o644 - notifies :reload, "service[xinetd]" -end