1 files changed, 102 insertions, 0 deletions
diff --git a/nixos/modules/sites/cgit.nix b/nixos/modules/sites/cgit.nix
new file mode 100644
index 0000000..b43faa4
--- /dev/null
+++ b/nixos/modules/sites/cgit.nix
@@ -0,0 +1,102 @@
+{ config, lib, pkgs, ... }:
+with lib;
+
+let
+  cfg = config.eth.sites.cgit;
+  fcgi = config.services.fcgiwrap;
+
+  cgitConfig = pkgs.writeText "cgitrc" ''
+    cache-size=1000
+    virtual-root=/
+
+    about-filter=${cfg.aboutFilter}
+    source-filter=${cfg.sourceFilter}
+
+    remove-suffix=1
+
+    enable-git-config=1
+    #enable-gitweb-owner=1
+    project-list=${cfg.projectList}
+    scan-path=${cfg.scanPath}
+
+    enable-blame=1
+    enable-follow-links=1
+    enable-index-owner=0
+
+    enable-http-clone=1
+
+    snapshots=tar.gz zip
+
+    ${cfg.extraConfig}
+  '';
+
+in {
+  options.eth.sites.cgit = {
+    enable = mkEnableOption "Whether to enable cgit.";
+
+    https = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Whether to enable HTTPS.";
+    };
+
+    virtualHost = mkOption {
+      type = types.str;
+      default = "_";
+      description = "Virtual Host to install the site under in Nginx.";
+      example = "git.eth.moe";
+    };
+
+    aboutFilter = mkOption {
+      type = types.path;
+      default = "${pkgs.cgit}/lib/cgit/filters/about-formatting.sh";
+    };
+    sourceFilter = mkOption {
+      type = types.path;
+      default = "${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py";
+    };
+
+    scanPath = mkOption {
+      type = types.path;
+      description = "Path to search for Git repositories under.";
+      example = "${config.services.gitolite.dataDir}/repositories/";
+    };
+    projectList = mkOption {
+      type = types.path;
+      description = "Path to a list of Git repositories to search for.";
+      example = "${config.services.gitolite.dataDir}/projects.list";
+    };
+
+    extraConfig = mkOption {
+      type = types.str;
+      default = "";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    services.nginx.virtualHosts.${cfg.virtualHost} = {
+      forceSSL = cfg.https;
+      enableACME = cfg.https;
+
+      root = "${pkgs.cgit}/cgit/";
+      extraConfig = ''
+        try_files $uri @cgit;
+
+        location @cgit {
+          include ${pkgs.nginx}/conf/fastcgi_params;
+          fastcgi_param CGIT_CONFIG     ${cgitConfig};
+          fastcgi_param HTTP_HOST       $server_name;
+          fastcgi_param PATH_INFO       $uri;
+          fastcgi_param QUERY_STRING    $args;
+          fastcgi_param SCRIPT_FILENAME ${pkgs.cgit}/cgit/cgit.cgi;
+
+          fastcgi_pass unix:${fcgi.socketAddress};
+        }
+      '';
+    };
+ 
+    services.fcgiwrap = {
+      enable = true;
+    };
+  };
+}