diff options
| author | Arseney300 <Arseney300@gmail.com> | 2026-02-20 04:57:36 +0700 |
|---|---|---|
| committer | Arseney300 <Arseney300@gmail.com> | 2026-02-20 04:57:36 +0700 |
| commit | ed9b6f12b63c1cf38fb4c675da31cdec604bf1d6 (patch) | |
| tree | 5827fbe3e6c42fd55228fdc03d4256a3ee5f9792 | |
| parent | b68790d86a40294ba035b93e40b29f1a071359a1 (diff) | |
Update CLAUDE.md with cgit service context
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
| -rw-r--r-- | CLAUDE.md | 16 |
1 files changed, 13 insertions, 3 deletions
@@ -5,7 +5,7 @@ Bastion is a self-hosted server system on Debian that runs multiple services in ## Domain - Primary domain: `swave.lol` -- Subdomains: `blog.swave.lol`, `jenkins.swave.lol` +- Subdomains: `blog.swave.lol`, `jenkins.swave.lol`, `cgit.swave.lol` ## Services / Stacks @@ -29,6 +29,16 @@ Bastion is a self-hosted server system on Debian that runs multiple services in - Volumes: `/var/git_ssh_keys` (public keys), `/var/git/repos` (repositories) - Host SSH runs on a non-standard port, so port 22 is free for git +### Cgit (git web interface) +- Dir: `git-server/cgit/` +- Builds from `git-server/cgit/Dockerfile` (Alpine + cgit + fcgiwrap + nginx) +- Part of `git-server/server.yaml` compose stack +- Network: `git-network` +- Mounts `/var/git/repos:/repos:ro` (read-only, shared with git-server) +- Auto-discovers all bare repos via `scan-path=/repos` +- No host ports (accessed only via main nginx reverse proxy) +- Accessible at `https://cgit.swave.lol` and `https://swave.lol/cgit` + ### Jenkins - Dir: `jenkins/` - Compose: `jenkins/docker-compose.yaml`, builds from `jenkins/Dockerfile` @@ -52,7 +62,7 @@ Bastion is a self-hosted server system on Debian that runs multiple services in ## Networking Each stack has its own Docker network. Nginx joins all of them to reverse proxy: -- `git-network` — git-server + nginx +- `git-network` — git-server + cgit + nginx - `ghost_network` — ghost + ghost-db + nginx - `jenkins_network` — jenkins + nginx @@ -79,6 +89,6 @@ Each stack has its own Docker network. Nginx joins all of them to reverse proxy: ## TODOs (from Readme.md) - Automatic certificate renewal for Let's Encrypt - Better organization of nginx configs (split per service?) -- Cgit web interface for git repos +- ~~Cgit web interface for git repos~~ (done) - Nexus (mentioned in Readme but not yet set up) - Firewall rules (allow only 80, 443, 22, 8080, 8000, 9000, 9418, 50000) |