git dir permissions

1 files changed, 2 insertions, 1 deletions

diff --git a/git.nix b/git.nix
index a63d718..e365540 100644
--- a/git.nix
+++ b/git.nix
@@ -7,7 +7,7 @@ in {
     group = "git";
     home = repoRoot;
     createHome = true;
-    homeMode = "755";
+    homeMode = "750"; 
     shell = "${pkgs.git}/bin/git-shell";
     openssh.authorizedKeys.keys = config.my.gitKeys;
   };
@@ -25,6 +25,7 @@ in {
   services.cgit.${domain} = {
     enable = true;
     scanPath = repoRoot;
+    group = "git"; # so cgit can traverse a non-world-readable repoRoot
     gitHttpBackend.checkExportOkFiles = true;
     settings.strict-export = "git-daemon-export-ok";
   };