···

       
9
       
 
       
        -subj '/CN=machine.${domain}'

     

       
10
       
 
       
      install -D -t $out key.pem cert.pem

     

       
11
       
 
       
    '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
12
       
 
       
  in

     

       
13
       
 
       
  {

     

       
14
       
 
       
    name = "public-inbox";

     
···

       
23
       
 
       
        ...

     

       
24
       
 
       
      }:

     

       
25
       
 
       
      let

     

       
26
       
-
       
        inherit (config.services) gitolite public-inbox;

     

       
27
       
-
       
        # Git repositories paths in Gitolite.

     

       
28
       
-
       
        # Only their baseNameOf is used for configuring public-inbox.

     

       
29
       
-
       
        repositories = [

     

       
30
       
-
       
          "user/repo1"

     

       
31
       
-
       
          "user/repo2"

     

       
32
       
-
       
        ];

     

       
33
       
 
       
      in

     

       
34
       
 
       
      {

     

       
35
       
 
       
        virtualisation.diskSize = 1 * 1024;

     
···

       
80
       
 
       
          };

     

       
81
       
 
       
          inboxes =

     

       
82
       
 
       
            lib.recursiveUpdate

     

       
83
       
-
       
              (lib.genAttrs (map baseNameOf repositories) (repo: {

     

       
84
       
 
       
                address = [

     

       
85
       
 
       
                  # Routed to the "public-inbox:" transport in services.postfix.transport

     

       
86
       
 
       
                  "${repo}@${domain}"

     
···

       
104
       
 
       
              };

     

       
105
       
 
       
          settings.coderepo = lib.listToAttrs (

     

       
106
       
 
       
            map (

     

       
107
       
-
       
              path:

     

       
108
       
-
       
              lib.nameValuePair (baseNameOf path) {

     

       
109
       
-
       
                dir = "/var/lib/gitolite/repositories/${path}.git";

     

       
110
       
-
       
                cgitUrl = "https://git.${domain}/${path}.git";

     

       
111
       
 
       
              }

     

       
112
       
-
       
            ) repositories

     

       
113
       
 
       
          );

     

       
114
       
-
       
        };

     

       
115
       
-
       


     

       
116
       
-
       
        # Use gitolite to store Git repositories listed in coderepo entries

     

       
117
       
-
       
        services.gitolite = {

     

       
118
       
-
       
          enable = true;

     

       
119
       
-
       
          adminPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJmoTOQnGqX+//us5oye8UuE+tQBx9QEM7PN13jrwgqY root@localhost";

     

       
120
       
-
       
        };

     

       
121
       
-
       
        systemd.services.public-inbox-httpd = {

     

       
122
       
-
       
          serviceConfig.SupplementaryGroups = [ gitolite.group ];

     

       
123
       
 
       
        };

     

       
124
       
 
       


     

       
125
       
 
       
        # Use nginx as a reverse proxy for public-inbox-httpd

     
···

       
181
       
 
       
        };

     

       
182
       
 
       


     

       
183
       
 
       
        environment.systemPackages = [

     

       
0
       
 
       

     

       
184
       
 
       
          pkgs.mailutils

     

       
185
       
 
       
          pkgs.openssl

     

       
186
       
 
       
        ];

     
···

       
189
       
 
       


     

       
190
       
 
       
    testScript = ''

     

       
191
       
 
       
      start_all()

     

       
0
       
 
       

     

       
192
       
 
       
      machine.wait_for_unit("multi-user.target")

     

       
193
       
 
       
      machine.wait_for_unit("public-inbox-init.service")

     

       
194
       
 
       


     

       
195
       
-
       
      # Very basic check that Gitolite can work;

     

       
196
       
-
       
      # Gitolite is not needed for the rest of this testScript

     

       
197
       
-
       
      machine.wait_for_unit("gitolite-init.service")

     

       
0
       
 
       

     

       
0
       
 
       

     

       
198
       
 
       


     

       
199
       
 
       
      # List inboxes through public-inbox-httpd

     

       
200
       
 
       
      machine.wait_for_unit("nginx.service")

     

···

       
9
       
 
       
        -subj '/CN=machine.${domain}'

     

       
10
       
 
       
      install -D -t $out key.pem cert.pem

     

       
11
       
 
       
    '';

     

       
12
       
+
       


     

       
13
       
+
       
    # Git repositories paths in Gitolite.

     

       
14
       
+
       
    # Here only their baseNameOf is used for configuring public-inbox inboxes.

     

       
15
       
+
       
    gitRepositories = [

     

       
16
       
+
       
      "user/repo1"

     

       
17
       
+
       
      "user/repo2"

     

       
18
       
+
       
    ];

     

       
19
       
 
       
  in

     

       
20
       
 
       
  {

     

       
21
       
 
       
    name = "public-inbox";

     
···

       
30
       
 
       
        ...

     

       
31
       
 
       
      }:

     

       
32
       
 
       
      let

     

       
33
       
+
       
        inherit (config.services) public-inbox;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
34
       
 
       
      in

     

       
35
       
 
       
      {

     

       
36
       
 
       
        virtualisation.diskSize = 1 * 1024;

     
···

       
81
       
 
       
          };

     

       
82
       
 
       
          inboxes =

     

       
83
       
 
       
            lib.recursiveUpdate

     

       
84
       
+
       
              (lib.genAttrs (map baseNameOf gitRepositories) (repo: {

     

       
85
       
 
       
                address = [

     

       
86
       
 
       
                  # Routed to the "public-inbox:" transport in services.postfix.transport

     

       
87
       
 
       
                  "${repo}@${domain}"

     
···

       
105
       
 
       
              };

     

       
106
       
 
       
          settings.coderepo = lib.listToAttrs (

     

       
107
       
 
       
            map (

     

       
108
       
+
       
              repositoryName:

     

       
109
       
+
       
              lib.nameValuePair (baseNameOf repositoryName) {

     

       
110
       
+
       
                dir = "/var/lib/public-inbox/repositories/${repositoryName}.git";

     

       
111
       
+
       
                cgitUrl = "https://git.${domain}/${repositoryName}.git";

     

       
112
       
 
       
              }

     

       
113
       
+
       
            ) gitRepositories

     

       
114
       
 
       
          );

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
115
       
 
       
        };

     

       
116
       
 
       


     

       
117
       
 
       
        # Use nginx as a reverse proxy for public-inbox-httpd

     
···

       
173
       
 
       
        };

     

       
174
       
 
       


     

       
175
       
 
       
        environment.systemPackages = [

     

       
176
       
+
       
          pkgs.gitMinimal

     

       
177
       
 
       
          pkgs.mailutils

     

       
178
       
 
       
          pkgs.openssl

     

       
179
       
 
       
        ];

     
···

       
182
       
 
       


     

       
183
       
 
       
    testScript = ''

     

       
184
       
 
       
      start_all()

     

       
185
       
+
       


     

       
186
       
 
       
      machine.wait_for_unit("multi-user.target")

     

       
187
       
 
       
      machine.wait_for_unit("public-inbox-init.service")

     

       
188
       
 
       


     

       
189
       
+
       
      machine.succeed(

     

       
190
       
+
       
        ${lib.concatMapStrings (repositoryName: ''

     

       
191
       
+
       
          "sudo -u public-inbox git init --bare -b main /var/lib/public-inbox/repositories/${repositoryName}.git",

     

       
192
       
+
       
        '') gitRepositories}

     

       
193
       
+
       
      )

     

       
194
       
 
       


     

       
195
       
 
       
      # List inboxes through public-inbox-httpd

     

       
196
       
 
       
      machine.wait_for_unit("nginx.service")