From a8d027dc7c6312969fa91165e0e99676f23eb6e4 Mon Sep 17 00:00:00 2001
From: Jan Sydänviita <jan@sydanviita.fi>
Date: Wed, 19 Aug 2026 16:39:03 +0300
Subject: Improve forge

---
 roles/jails/22_forge/tasks/main.yml | 56 +++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

(limited to 'roles/jails/22_forge/tasks')

diff --git a/roles/jails/22_forge/tasks/main.yml b/roles/jails/22_forge/tasks/main.yml
index 4fd426d..cf1e9c6 100644
--- a/roles/jails/22_forge/tasks/main.yml
+++ b/roles/jails/22_forge/tasks/main.yml
@@ -53,6 +53,34 @@
     group: git
     mode: "0700"
 
+- name: Deploy forge deploy private key
+  copy:
+    content: "{{ forge_deploy_key.private }}"
+    dest: /home/git/.ssh/forge_deploy
+    owner: git
+    group: git
+    mode: "0600"
+
+- name: Deploy forge deploy public key
+  copy:
+    content: "{{ forge_deploy_key.public }}"
+    dest: /home/git/.ssh/forge_deploy.pub
+    owner: git
+    group: git
+    mode: "0644"
+
+- name: Deploy SSH config for git user
+  copy:
+    content: |
+      Host *
+          IdentityFile ~/.ssh/forge_deploy
+          IdentitiesOnly yes
+          StrictHostKeyChecking=accept-new
+    dest: /home/git/.ssh/config
+    owner: git
+    group: git
+    mode: "0600"
+
 - name: Deploy authorized_keys
   copy:
     content: "{{ forge_authorized_keys }}\n"
@@ -83,6 +111,7 @@
     - delete
     - rename
     - describe
+    - mirror-to
 
 - name: Create /usr/local/etc/cgit directory
   file:
@@ -92,6 +121,33 @@
     group: wheel
     mode: "0755"
 
+- name: Create git-mirrors log file
+  file:
+    path: /var/log/git-mirrors.log
+    state: touch
+    owner: git
+    group: git
+    mode: "0644"
+
+- name: Deploy git-mirrors script
+  copy:
+    src: "{{ jail_role_dir }}/files/git-mirrors.sh"
+    dest: /usr/local/bin/git-mirrors
+    owner: root
+    group: wheel
+    mode: "0755"
+
+- name: Deploy crontab for git user
+  copy:
+    content: |
+      SHELL=/bin/sh
+      PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
+      0 * * * * /usr/local/bin/git-mirrors
+    dest: /var/cron/tabs/git
+    owner: root
+    group: wheel
+    mode: "0600"
+
 - name: Deploy cgit head-include
   copy:
     src: "{{ jail_role_dir }}/files/head-include.html"
-- 
cgit v1.3