{ config, lib, pkgs, ... }: # TODO: remove tv lib :) with import <stockholm/lib>; let repos = priv-repos // krebs-repos // connector-repos // krebsroot-repos; rules = concatMap krebs-rules (attrValues krebs-repos) ++ concatMap priv-rules (attrValues priv-repos) ++ concatMap connector-rules (attrValues connector-repos) ++ concatMap krebsroot-rules (attrValues krebsroot-repos); krebsroot-repos = mapAttrs make-krebs-repo { hydra-stockholm = { }; }; krebs-repos = mapAttrs make-krebs-repo { stockholm = { cgit.desc = "Make all the systems into 1systems!"; }; stockholm-issues = { cgit.desc = "Issue tracker"; }; tinc_graphs = { cgit.desc = "Tinc Advanced Graph Generation"; }; stockholm-init = { cgit.desc = "Build new Stockholm hosts"; }; cac-api = { }; euer_blog = { }; ampel = { }; europastats = { }; arafetch = { }; disko = { }; init-stockholm = { cgit.desc = "Init stuff for stockholm"; }; }; priv-repos = mapAttrs make-priv-repo { autosync = { }; fenkins = { }; pass = { }; secrets = { }; }; connector-repos = mapAttrs make-priv-repo { connector = { }; minikrebs = { }; mattermost = { cgit.desc = "Mattermost Docker files"; }; }; # TODO move users to separate module make-priv-repo = name: { ... }: { inherit name; public = false; }; make-krebs-repo = with git; name: { cgit ? {}, ... }: { inherit cgit name; public = true; }; # TODO: get the list of all krebsministers krebsminister = with config.krebs.users; [ lass tv ]; all-makefu = with config.krebs.users; [ makefu makefu-omo makefu-tsp makefu-vbob makefu-tempx makefu-android ]; all-exco = with config.krebs.users; [ exco ]; priv-rules = repo: set-owners repo all-makefu; connector-rules = repo: set-owners repo all-makefu ++ set-owners repo all-exco; krebs-rules = repo: set-owners repo all-makefu ++ set-ro-access repo krebsminister; krebsroot-rules = repo: set-owners repo (all-makefu ++ krebsminister); set-ro-access = with git; repo: user: optional repo.public { inherit user; repo = [ repo ]; perm = fetch; }; set-owners = with git;repo: user: singleton { inherit user; repo = [ repo ]; perm = push "refs/*" [ non-fast-forward create delete merge ]; }; in { krebs.git = { enable = true; cgit = { settings = { root-title = "public repositories"; root-desc = "keep on krebsing"; }; }; inherit repos rules; }; }