Controlling the post-update hook

1 files changed, 15 insertions, 0 deletions

diff --git a/manifests/init.pp b/manifests/init.pp
index 2661953..6053bbf 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -78,6 +78,21 @@ class ikiwiki {
             group   => root,
           }
         }
+
+        # The post-update hook should have www-data as owner so
+        # gitosis can do a setuid to it and write to ikiwiki
+        # folders without messing the permission scheme.
+        #
+        # See http://ikiwiki.info/rcs/git/
+        #     http://ikiwiki.info/forum/multi-user_setup_of_ikiwiki__44___gitosis_and_apache2_in_Debian_Sid/
+        #
+        # TODO: ensure the post-update hook is setuid.
+        #
+        file { "/var/git/repositories/${name}.git/hooks/post-update":
+          ensure => present,
+          owner  => www-data,
+          group  => gitosis,
+        }
       }
     }
   }