From 3559bc288e142d76d94d329f6efb66abe53b5d0b Mon Sep 17 00:00:00 2001
From: Alexander Kassouni <alex@kassouni.net>
Date: Fri, 25 Sep 2026 23:40:05 -0700
Subject: git dir permissions

---
 git.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'git.nix')

diff --git a/git.nix b/git.nix
index a63d718..e365540 100644
--- a/git.nix
+++ b/git.nix
@@ -7,7 +7,7 @@ in {
     group = "git";
     home = repoRoot;
     createHome = true;
-    homeMode = "755";
+    homeMode = "750"; 
     shell = "${pkgs.git}/bin/git-shell";
     openssh.authorizedKeys.keys = config.my.gitKeys;
   };
@@ -25,6 +25,7 @@ in {
   services.cgit.${domain} = {
     enable = true;
     scanPath = repoRoot;
+    group = "git"; # so cgit can traverse a non-world-readable repoRoot
     gitHttpBackend.checkExportOkFiles = true;
     settings.strict-export = "git-daemon-export-ok";
   };
-- 
cgit v1.3.1