Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

dist-git/pagure: configure pagure to allow access via a single git user for everyone

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2021-03-01 13:21:25 +01:00
parent a3677b36a1
commit 218d692b85
2 changed files with 7 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/distgit/pagure/templates/pagure.cfg
View file

@ -298,8 +298,6 @@ ADMIN_API_ACLS = [
PROJECT_NAME_REGEX = '^[a-zA-z0-9_][a-zA-Z0-9-_\.+]*$'
HTTP_REPO_ACCESS_GITOLITE = None
CSP_HEADERS = (
"default-src 'self'; "
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; "

17
roles/distgit/pagure/templates/pagure_shared.cfg
View file

@ -90,16 +90,13 @@ PDC_URL = 'https://pdc{{ env_suffix }}.fedoraproject.org/rest_api/v1/'
SSH_KEYS_USERNAME_LOOKUP = True
SSH_KEYS_OPTIONS = 'restrict,command="/usr/libexec/pagure/aclchecker.py %(username)s"'
SSH_COMMAND_REPOSPANNER = ([
"/usr/libexec/repobridge",
"--extra", "username", "%(username)s",
"--extra", "repotype", "%(repotype)s",
"--extra", "project_name", "%(project_name)s",
"--extra", "project_user", "%(project_user)s",
"--extra", "project_namespace", "%(project_namespace)s",
"%(cmd)s",
"'pagure/%(repotype)s/%(reponame)s'",
], {"REPOBRIDGE_CONFIG": "/etc/repobridge/rpms.json"})
{% if env == 'staging' %}
GIT_AUTH_BACKEND = 'pagure'
SSH_KEYS_USERNAME_EXPECT = 'git'
{% endif %}
HTTP_REPO_ACCESS_GITOLITE = None
SSH_COMMAND_NON_REPOSPANNER = ([
"/usr/libexec/git-core/%(cmd)s",
"%(repopath)s",