worker_processes 1;

events {
    worker_connections 1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile      on;
    keepalive_timeout 65;

    server {
        listen 80;
        server_name _;

        root /usr/local/www/cgit;

        # Block HTTP access to private (dot-prefixed) repos
        location ~ ^/\..+ {
            return 403;
        }

        # Anonymous git HTTP clone
        location ~ ^/(.+\.git)/(info/refs|git-upload-pack)$ {
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME /usr/local/libexec/git-core/git-http-backend;
            fastcgi_param GIT_HTTP_EXPORT_ALL 1;
            fastcgi_param GIT_PROJECT_ROOT /var/db/repos;
            fastcgi_param GIT_CONFIG_GLOBAL /usr/local/etc/git/gitconfig-www;
            fastcgi_param PATH_INFO $uri;
            fastcgi_pass unix:/var/run/fcgiwrap/fcgiwrap.sock;
        }

        location / {
            try_files $uri @cgit;
        }

        location @cgit {
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME /usr/local/www/cgit/cgit.cgi;
            fastcgi_param PATH_INFO $uri;
            fastcgi_param QUERY_STRING $query_string;
            fastcgi_param GIT_CONFIG_GLOBAL /usr/local/etc/git/gitconfig-www;
            fastcgi_pass unix:/var/run/fcgiwrap/fcgiwrap.sock;
        }
    }
}