summaryrefslogtreecommitdiff
path: root/roles/gitserver/files
diff options
context:
space:
mode:
authorDmitry Ilvokhin <d@ilvokhin.com>2024-05-03 20:46:45 +0100
committerDmitry Ilvokhin <d@ilvokhin.com>2024-05-03 20:46:45 +0100
commitc6483994e13a62551ef22ed75433582b0ac96813 (patch)
treebc7d61a8b32f7dad7d251453b5303090aa205326 /roles/gitserver/files
parente184bdcaaf94596fdf9e9364eb0e85c01f589394 (diff)
downloadinfra-c6483994e13a62551ef22ed75433582b0ac96813.tar.gz
infra-c6483994e13a62551ef22ed75433582b0ac96813.tar.bz2
infra-c6483994e13a62551ef22ed75433582b0ac96813.zip
Do not export everything with git-daemon
We should export only repositories with git-daemon-export-ok file inside.
Diffstat (limited to 'roles/gitserver/files')
-rw-r--r--roles/gitserver/files/git-daemon.service14
1 files changed, 14 insertions, 0 deletions
diff --git a/roles/gitserver/files/git-daemon.service b/roles/gitserver/files/git-daemon.service
new file mode 100644
index 0000000..e08d066
--- /dev/null
+++ b/roles/gitserver/files/git-daemon.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Git Daemon Instance
+
+[Service]
+User=git
+# The '-' is to ignore non-zero exit statuses
+ExecStart=-/usr/lib/git-core/git-daemon --inetd --base-path=/srv/git
+StandardInput=socket
+StandardOutput=inherit
+StandardError=journal
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on