It works, permission check missing

1 files changed, 54 insertions, 0 deletions

diff --git a/init b/init
new file mode 100755
index 0000000..430acc8
--- /dev/null
+++ b/init
@@ -0,0 +1,54 @@
+#!/usr/bin/env fish
+
+argparse 'u/users=+' 'r/repos=+' -- $argv
+or exit 1;
+
+# setup git user
+adduser git -D --shell "/usr/bin/git-shell"
+
+# create users and copy keys in correct location, set permissions
+for user in (string split ',' $_flag_u)
+	echo "Setting up user: $user"
+	if [ "$user" = git ]
+		echo "Denied because user git is reserved"
+		continue
+	end
+
+	set -l HOME "/home/$user"
+	# user is not restricted, this is done in ssh config with forceCommand
+	# we need to be able to run a fish script to check for permissions
+	adduser --home $HOME -D "$user"
+	passwd -u "$user"
+	mkdir "$HOME/.ssh"
+	cp "/var/keys/$user/authorized_keys" "$HOME/.ssh/"
+	chown -R $user "$HOME"
+	chmod -R 700 "$HOME"
+end
+
+for repoConfig in (string split ',' $_flag_r)
+	set -l parsedConfig (string split ':' $repoConfig)
+	set -l repo $parsedConfig[1]
+
+	# we assume all repos to be in /srv/repos
+	set -l repoDir "/srv/repos/$repo.git"
+	echo "Setting up repo: $repo"
+
+	# write user as allowed into permission file
+	for user in $parsedConfig[2..]
+		echo "$repo:$user" >> /srv/repos/permissions
+	end
+
+	# setup repo dir
+	if not test -d $repoDir
+		mkdir -p $repoDir
+		git init --bare $repoDir -b trunk
+	end
+	chown -R git:git "$repoDir"
+	chmod -R 700 "$repoDir"
+end
+
+echo "Setting up server"
+# generate host keys in case
+mkdir -p /var/keys/etc/ssh/ && ssh-keygen -A -f /var/keys
+# run ssh daemon
+/usr/sbin/sshd -D -e