整理文档

deploy/Dockerfile

@@ -8,7 +8,7 @@ RUN groupadd -g 10002 ingress && useradd -u 10001 -g ingress -M -s /usr/sbin/nol
 
 FROM base AS api
 USER 10001:10002
-ENV API_BIND=0.0.0.0:3001 DATA_DIR=/data CHUBLOG_SSH_CONFIG=/auth/publishers.json INGRESS_REPO=/srv/ingress/content.git RUST_LOG=info
+ENV API_BIND=0.0.0.0:3001 DATA_DIR=/data CHUBLOG_SSH_CONFIG=/auth/publishers.json INGRESS_DIR=/srv/ingress/authors RUST_LOG=info
 ENTRYPOINT ["chublog-api"]
 
 FROM base AS ssh

deploy/gitconfig

@@ -1,2 +1,2 @@
 [safe]
-    directory = /srv/ingress/content.git
+    directory = /srv/ingress/authors/*

deploy/init-volumes.sh

@@ -7,8 +7,7 @@ chmod 755 /auth
 chown 10002:10002 /srv/ingress
 chmod 750 /srv/ingress
 chown 10003:10003 /db-data /db-logs
-if [ ! -d /srv/ingress/content.git ]; then
-    setpriv --reuid=10002 --regid=10002 --clear-groups git init --bare --initial-branch=main --shared=group /srv/ingress/content.git
-    setpriv --reuid=10002 --regid=10002 --clear-groups git -C /srv/ingress/content.git config receive.denyNonFastForwards true
-    setpriv --reuid=10002 --regid=10002 --clear-groups git -C /srv/ingress/content.git config receive.denyDeletes true
-fi
+# Per-author repositories are created lazily by the authenticated SSH gateway.
+mkdir -p /srv/ingress/authors
+chown 10002:10002 /srv/ingress/authors
+chmod 750 /srv/ingress/authors