summaryrefslogtreecommitdiff
path: root/libpiny
AgeCommit message (Collapse)AuthorFilesLines
2021-10-03Piny::Repo: Fix hook security checks.Joe Rayhawk1-5/+5
2021-03-11*/debian/control: update maintainership to meJoe Rayhawk1-1/+1
2021-03-11libpiny-perl.postinst: stop breaking shadow gid setupsJoe Rayhawk1-1/+1
2019-10-28libpiny: repo: fix various syntax errorsJoe Rayhawk1-3/+3
2019-10-28libpiny: repo: local is only for shadow variables. ugh.Joe Rayhawk1-4/+4
2019-10-28libpiny: repo: add hooks check and backwards-compatibly delete more configs ↵Joe Rayhawk1-6/+38
on destroy()
2018-10-01Piny::Repo: addgroup should use --systemJoe Rayhawk1-1/+1
2018-09-27Arrange for Tempfiles to be safely written in-dirJoe Rayhawk1-9/+9
The default File::Temp DIR is not necessarily the same filesystem as the destination, which makes atomic linking impossible.
2018-09-24libpiny: Piny::Repo: Restrict iwiwiki srcdirsJoe Rayhawk1-0/+2
We would optimally like Ikiwiki source directories to be at least as restrictive as the git repositories they came from. For now, maximal restriction seems like a perfectly fine way to achieve this.
2018-09-24libpiny: Piny::Repo: chmod and chgrp snowflakesJoe Rayhawk1-4/+4
The snowflakes directory has mutable files such as packed-refs that need to be group writable.
2018-09-24libpiny: Piny::Repo: Symlink files out of rootJoe Rayhawk1-0/+14
Due to insecurities surrounding core.hooksPath and git's insistence upon locking files it doesn't even intend to update, it's necessary to symbolicly link several files into their own namespaces. We specifically do this with HEAD and packed refs, but there might eventually be others to worry about.
2018-09-22Repo.pm: Migrate to new PAM and unixgroup modulesJoe Rayhawk1-6/+6
Apache 2.2->2.4 upgrade changed module names and configuration directives for various PAM authentication features; with this patch we can successfully autogenerate those.
2018-01-21Piny::Repo: Initial read-only repository support.Joe Rayhawk1-3/+8
Not all systems want us to manage git repositories: we can still provide ikiwiki/apache support for existing read-only repositories. This would probably be better done with some sort of configuration variable, but a simple access() W_OK writability check will have to do for now.
2014-03-16Default ikiwiki.setup: remove "Preferences" link.Joe Rayhawk1-0/+1
2014-03-16Merge remote-tracking branch 'origin/master'Joe Rayhawk2-4/+13
2014-03-16Repo.pm: whoops, wrong objectJoe Rayhawk1-1/+1
2014-03-16libpiny.key should be owned by www-data, not shadowJoe Rayhawk1-1/+1
2013-04-12libpiny: whoops, missed apachereload check on destroy_apachejrayhawk+piny.be@omgwallhack.org1-1/+3
2013-04-12libpiny: renaming reloadapache to apachereloadjrayhawk+piny.be@omgwallhack.org2-2/+2
2013-04-12libpiny: add piny.reloadapache configuration variablejrayhawk+piny.be@omgwallhack.org2-1/+4
2013-04-12libpiny: further corrections to piny.gitpathjrayhawk+piny.be@omgwallhack.org1-3/+7
2013-04-12libpiny: making git path configurable (default: /srv/git)Joe Rayhawk2-4/+5
2012-09-14Piny::Repo: do not rely on trailing slashes in user-configurable ikiwikisrcdirJoe Rayhawk1-1/+1
2012-08-30Migrate Config::Simple over to Config::GitLikejrayhawk+piny.be@omgwallhack.org2-39/+20
Fixes problems parsing complex option statements, particularly url.<base>.pushInsteadOf
2012-08-14Piny::Config: add receive.denydeletes to list of tweakablesJoe Rayhawk1-0/+1
2012-04-10libpiny/debian/control: adding alternate package name for Digest::SHA1 in wheezyJoe Rayhawk1-1/+1
2012-01-11Piny::Repo: whoops, wrong reference nameJoe Rayhawk1-1/+1
2012-01-11Piny::Repo: Adding support for 0640+searchJoe Rayhawk2-1/+5
2011-12-30Repo: maybe i should learn to compile check before committingJoe Rayhawk1-5/+5
2011-12-30Repo: Apache configs should really do things in the piny.ikiwiki=false caseJoe Rayhawk1-42/+57
2011-12-30Bringing Ikiwiki Username constraint in line with Reponame constraint ↵Joe Rayhawk1-1/+1
(Debian Policy 5.6.1, 5.6.7)
2011-12-08libpiny: Clarifying default ikiwiki setup fileJoe Rayhawk1-15/+13
2011-12-08libpiny: turn search on by defaultJoe Rayhawk1-1/+1
2011-12-08Piny::Repo: Adding support for a global ikiwiki overrides file in ↵Joe Rayhawk1-0/+13
/etc/ikiwiki/piny.setup.pl
2011-12-05Piny::Repo: fix cwd impermission problem by hardcoding a known-rx dirJoe Rayhawk1-0/+2
2011-12-05Piny::Repo: Adding -H to sudo invocations to get rid of problems with ↵Joe Rayhawk1-3/+3
unreadable homedirs.
2011-10-24Shifting instances of SSLRequireSSL around so Piny can operate behind an SSL ↵Joe Rayhawk1-6/+6
proxy
2011-06-30Disable htmlscrubber by default since most piny deployments are run by power ↵Joe Rayhawk1-1/+1
users.
2011-06-29Fix permissions on ikiwiki setup fileJoe Rayhawk1-0/+1
2011-06-14Adding --no-run-if-empty to attempt to chmod empty objectsJoe Rayhawk1-1/+1
2011-06-12Adding distinction between immutable and normal git file permissionsjrayhawk+piny.be@omgwallhack.org1-4/+10
2011-06-04Bugfixes for core.sharedrepoJoe Rayhawk1-19/+30
2011-06-01Fix wikilist.d removalJoe Rayhawk1-1/+1
2011-06-01newrepo: migrating rebuild logic out of Repo.pm and making ↵Joe Rayhawk1-7/+1
--enable/disable-ikiwiki work
2011-05-31Piny::Repo->create: mostly fixing check for local remoteJoe Rayhawk1-2/+2
2011-05-31Hopefully better validation of local repos.Julian Blake Kongslie1-1/+6
2011-05-31fixed previous commitJoe Rayhawk1-1/+1
2011-05-31FIXME: broken config copying.Joe Rayhawk1-5/+12
2011-05-30Adding primitive cloning supportJoe Rayhawk1-2/+2
2011-05-24libpiny: $repo.git/config should probably be world-readable, but git-config ↵Joe Rayhawk1-8/+8
likes setting it to core.sharedrepository mask