(i be traumatized) fixes knotguard options, along with some more config improvements and fixes in docker compose and dockerfile
REVERTED
docker/rootfs/etc/s6-overlay/s6-rc.d/knotserver/run
REVERTED
docker/rootfs/etc/s6-overlay/s6-rc.d/knotserver/run
ERROR
guard/guard.go
ERROR
guard/guard.go
Failed to calculate interdiff for this file.
ERROR
keyfetch/keyfetch.go
ERROR
keyfetch/keyfetch.go
Failed to calculate interdiff for this file.
REBASED
docker/docker-compose.yml
REBASED
docker/docker-compose.yml
This patch was likely rebased, as context lines do not match.
NEW
docker/Dockerfile
NEW
docker/Dockerfile
···
1
FROM docker.io/golang:1.24-alpine3.21 AS build
2
3
ENV CGO_ENABLED=1
4
+
ENV KNOT_REPO_SCAN_PATH=/home/git/repositories
5
WORKDIR /usr/src/app
6
COPY go.mod go.sum ./
7
···
35
EXPOSE 22
36
EXPOSE 5555
37
38
+
ENTRYPOINT ["/bin/sh", "-c", "chown git:git /app && chown -R git:git \"$KNOT_REPO_SCAN_PATH\" && /init"]
NEW
docker/rootfs/etc/ssh/sshd_config.d/tangled_sshd.conf
NEW
docker/rootfs/etc/ssh/sshd_config.d/tangled_sshd.conf
···
5
PasswordAuthentication no
6
7
Match User git
8
+
AuthorizedKeysCommand /usr/local/bin/knot keys -output authorized-keys -internal-api http://$(echo ${KNOT_SERVER_INTERNAL_LISTEN_ADDR:-localhost:5444}) -git-dir ${KNOT_REPO_SCAN_PATH:-/home/git/repositories} -log-path /tmp/knotguard.log
9
AuthorizedKeysCommandUser nobody