diff --git a/boxes/netbox/default.nix b/boxes/netbox/default.nix index 1e015c7..2d112d5 100644 --- a/boxes/netbox/default.nix +++ b/boxes/netbox/default.nix @@ -229,12 +229,10 @@ in { ''; }; - users.users.useracc = { - isNormalUser = true; - extraGroups = [ "wheel" "docker" ]; - }; - users.users.ryan = { + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKbhM3wj0oqjR3pUaZgpfX4Xo4dlzvBTbQ48zHyg7Pwx usr" + ]; isNormalUser = true; extraGroups = [ "wheel" "docker" ]; }; @@ -322,6 +320,21 @@ in { return 301 https://mail.beepboop.systems; ''; }; + locations."~ \\.git" = { + extraConfig = '' + client_max_body_size 0; + + include ${pkgs.nginx}/conf/fastcgi_params; + fastcgi_param SCRIPT_FILENAME ${pkgs.git}/bin/git-http-backend; + fastcgi_param GIT_HTTP_EXPORT_ALL ""; + fastcgi_param GIT_PROJECT_ROOT /var/lib/git; + fastcgi_param PATH_INFO $uri; + + # Forward REMOTE_USER as we want to know when we are authenticated + fastcgi_param REMOTE_USER $remote_user; + fastcgi_pass unix:${config.services.fcgiwrap.socketAddress}; + ''; + }; locations."/" = { extraConfig = '' include ${pkgs.nginx}/conf/fastcgi_params; diff --git a/flake.lock b/flake.lock index 5c25f72..4f1b849 100644 --- a/flake.lock +++ b/flake.lock @@ -210,11 +210,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-iemuV19UU8TriqixcvwdRUTa8lIrxc3Krwt4bHpUUWE=", - "path": "/nix/store/0ygfgmnw546l628g3a6gdnk9h7hh1pv0-source/builds", + "path": "/nix/store/gs6dzhqc1qncslkmwckp3q56y6i14w8s-source/builds", "type": "path" }, "original": { - "path": "/nix/store/0ygfgmnw546l628g3a6gdnk9h7hh1pv0-source/builds", + "path": "/nix/store/gs6dzhqc1qncslkmwckp3q56y6i14w8s-source/builds", "type": "path" } },