1 file changed, 7 insertions, 0 deletions

diff --git a/custom/extensions/auth-inline.lua b/custom/extensions/auth-inline.luaindex e795717..014caa9 100644--- a/custom/extensions/auth-inline.lua+++ b/custom/extensions/auth-inline.lua@@ -6,6 +6,13 @@ -- lists in two tables inside the script, which suits a small fixed set of -- users. The companion auth-file.lua behaves identically but reads the same -- lists from files on disk.+--+-- make install puts this script in /usr/local/lib/cgit/filters and overwrites+-- it there on every run, which would wipe the lists below and leave every+-- repository public. Edit a copy kept where make install never writes, such+-- as /etc/cgit/auth-inline.lua, and point auth-filter at it. The copy holds+-- password hashes, so make it readable only by root and the web server's+-- group, for example root:www-data with mode 0640.  -- The script runs on Lua 5.1 through 5.5 and LuaJIT, and the runtime has to be -- the same Lua that cgit was built against. On 5.5 it needs luaossl 20260910
diff --git a/custom/extensions/auth-inline.lua b/custom/extensions/auth-inline.lua
index e795717..014caa9 100644
--- a/custom/extensions/auth-inline.lua
+++ b/custom/extensions/auth-inline.lua
@@ -6,6 +6,13 @@
 -- lists in two tables inside the script, which suits a small fixed set of
 -- users. The companion auth-file.lua behaves identically but reads the same
 -- lists from files on disk.
+--
+-- make install puts this script in /usr/local/lib/cgit/filters and overwrites
+-- it there on every run, which would wipe the lists below and leave every
+-- repository public. Edit a copy kept where make install never writes, such
+-- as /etc/cgit/auth-inline.lua, and point auth-filter at it. The copy holds
+-- password hashes, so make it readable only by root and the web server's
+-- group, for example root:www-data with mode 0640.
 
 -- The script runs on Lua 5.1 through 5.5 and LuaJIT, and the runtime has to be
 -- the same Lua that cgit was built against. On 5.5 it needs luaossl 20260910