1 ##
  2 # This file contains the configuration for:
  3 #       git.somewhere.de
  4 ##
  5 
  6 #
  7 # HTTP to HTTPS redirector
  8 #
  9 server {
 10         listen  80;
 11         listen  [::]:80;
 12 
 13         server_name     git.somewhere.de;
 14 
 15         access_log      /srv/www/git.somewhere.de/logs/access.log;
 16         error_log       /srv/www/git.somewhere.de/logs/error.log;
 17 
 18         rewrite         ^ [URL]https://$server_name$request_uri?[/URL] permanent;
 19 }
 20 
 21 #
 22 # HTTPS git and gitwerb host
 23 #
 24 server {
 25         listen  443             ssl http2;
 26         listen  [::]:443        ssl http2;
 27 
 28         server_name             git.somewhere.de;
 29 
 30         ssl_certificate         /etc/ssl/private/web/git.somewhere.de.crt.pem;
 31         ssl_certificate_key     /etc/ssl/private/web/git.somewhere.de.key.pem;
 32 
 33         access_log              /srv/www/git.somewhere.de/logs/access.log;
 34         error_log               /srv/www/git.somewhere.de/logs/error.log;
 35 
 36         root                    /usr/share/gitweb;
 37 
 38         #
 39         # handly any access by a git client that wants to either
 40         # pull something from or wants to push something to this
 41         # server.
 42         #
 43         location ~ /git/ {
 44                 #
 45                 # handle all the READ-only cases, that do not need
 46                 # any authentication
 47                 #
 48                 if ($uri ~ ^/git/.*/git-upload-pack$) {
 49                         # rewrite to READ
 50                         rewrite /git/(.*)       /git-read/$1    last;
 51                 }
 52                 if ($arg_service = git-upload-pack) {
 53                         # rewrite to READ
 54                         rewrite /git/(.*)       /git-read/$1    last;
 55                 }
 56 
 57                 #
 58                 # handle all the WRITE cases that will need to be
 59                 # authenticated
 60                 #
 61                 if ($uri ~ ^/git/.*/git-receive-pack$) {
 62                         # rewrite to WRITE
 63                         rewrite /git/(.*)       /git-write/$1   last;
 64                 }
 65                 if ($arg_service = git-receive-pack) {
 66                         # rewrite to WRITE
 67                         rewrite /git/(.*)       /git-write/$1   last;
 68                 }
 69         }
 70 
 71         #       
 72         # handle the READ only case and it's direct serving
 73         # from the fs
 74         #
 75         location ~ /git-read(/.*) {
 76                 location ~ "/git/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$" {
 77                         root /srv/git/;
 78                 }
 79 
 80                 location ~ "/git/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$" {
 81                         root /srv/git/;
 82                 }
 83 
 84                 try_files $uri @git-http-backend;
 85         }
 86 
 87         #
 88         # handle the WRITE case and the authentication of the user
 89         #
 90         location ~ /git-write(/.*) {
 91                 auth_basic              "Restricted Access";
 92                 auth_basic_user_file    /srv/git/.userlist;
 93 
 94                 try_files $uri @git-http-backend;
 95         }
 96 
 97         #
 98         # the generic git-http-backend location
 99         #
100         location @git-http-backend {
101                 fastcgi_param   SCRIPT_FILENAME         /usr/lib/git-core/git-http-backend;
102                 fastcgi_param   PATH_INFO               $1;
103                 fastcgi_param   GIT_PROJECT_ROOT        /srv/git/;
104                 fastcgi_param   GIT_HTTP_EXPORT_ALL     "";
105                 fastcgi_param   REMOTE_USER             $remote_user;
106                 fastcgi_pass    unix:/var/run/fcgiwrap.socket;
107                 include         fastcgi_params;
108         }
109 
110         #
111         # anything else should go to gitweb
112         #
113         try_files $uri @gitweb;
114         location @gitweb {
115                 fastcgi_param   SCRIPT_FILENAME         /usr/share/gitweb/gitweb.cgi;
116                 fastcgi_param   PATH_INFO               $uri;
117                 fastcgi_param   GITWEB_CONFIG           /etc/gitweb.conf;
118                 fastcgi_pass    unix:/var/run/fcgiwrap.socket;
119                 include         fastcgi_params;
120         }
121 }
122 
123 ### EOF ###
124