Initialize ChuBlog backend with SSH Git publishing

deploy/init-volumes.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+set -eu
+mkdir -p /data /auth /srv/ingress /db-data /db-logs
+chown 10001:10002 /data /auth
+chmod 700 /data
+chmod 755 /auth
+chown 10002:10002 /srv/ingress
+chmod 750 /srv/ingress
+chown 10003:10003 /db-data /db-logs
+if [ ! -d /srv/ingress/content.git ]; then
+    setpriv --reuid=10002 --regid=10002 --clear-groups git init --bare --initial-branch=main --shared=group /srv/ingress/content.git
+    setpriv --reuid=10002 --regid=10002 --clear-groups git -C /srv/ingress/content.git config receive.denyNonFastForwards true
+    setpriv --reuid=10002 --regid=10002 --clear-groups git -C /srv/ingress/content.git config receive.denyDeletes true
+fi