summaryrefslogtreecommitdiff
path: root/etc/httpd/conf.d/git-http-cf.conf
diff options
context:
space:
mode:
authorRATDAD <lambda@disroot.org>2025-12-13 21:00:08 -0500
committerRATDAD <lambda@disroot.org>2025-12-13 21:00:08 -0500
commit00dffa8cf5cac8322cb47f2222e424d3960e7939 (patch)
tree7db0460694037b063f97058ecb9eb664b6162b45 /etc/httpd/conf.d/git-http-cf.conf
parentde8d06726cae205ead43f8b1ac07ecc59a07363b (diff)
downloadcgit-docker-00dffa8cf5cac8322cb47f2222e424d3960e7939.tar.gz
cgit-docker-00dffa8cf5cac8322cb47f2222e424d3960e7939.tar.bz2
cgit-docker-00dffa8cf5cac8322cb47f2222e424d3960e7939.zip
Added Git Smart HTTP Support
Diffstat (limited to 'etc/httpd/conf.d/git-http-cf.conf')
-rw-r--r--etc/httpd/conf.d/git-http-cf.conf26
1 files changed, 26 insertions, 0 deletions
diff --git a/etc/httpd/conf.d/git-http-cf.conf b/etc/httpd/conf.d/git-http-cf.conf
new file mode 100644
index 0000000..0d4302e
--- /dev/null
+++ b/etc/httpd/conf.d/git-http-cf.conf
@@ -0,0 +1,26 @@
+#
+#
+# Git Smart HTTP Support (readonly)
+# clone/fetch ONLY
+
+SetEnv GIT_PROJECT_ROOT /srv/git
+SetEnv GIT_HTTP_EXPORT_ALL 1
+
+# Expose git-upload-pack and info/refs.
+ScriptAliasMatch "^(/.+/(git-upload-pack|info/refs))$" \
+ /usr/libexec/git-core/git-http-backend$1
+
+# No authentication needed for git clone/fetch.
+<LocationMatch "^/.+/git-upload-pack$">
+ Require all granted
+</LocationMatch>
+
+# Only allow info/refs for git clone/fetch.
+<LocationMatch "^/.+/info/refs$">
+ Require expr %{QUERY_STRING} == "service=git-upload-pack"
+</LocationMatch>
+
+# Explicitly deny git push just in case.
+<LocationMatch "^/.+/git-receive-pack$">
+ Require all denied
+</LocationMatch>