cgit/cgitrc.5.txt, branch v0.11.2

Add repo.hide and repo.ignore

2015-01-29T15:41:14Z

These options can be used to hide a repository from the index or completely ignore a repository, respectively. They are particularly useful when used in combination with scan-path. Signed-off-by: Lukas Fleischer

repolist: add owner-filter

2014-12-24T02:08:20Z

This allows custom links to be used for repository owners by configuring a filter to be applied in the "Owner" column in the repository list.

cgitrc.5: we mean a cgi response, not request

2014-08-01T15:37:27Z

remove trailing whitespaces from source files

2014-04-17T10:55:09Z

Clean up cache documentation.

2014-02-21T00:36:20Z

Signed-off-by: Jason A. Donenfeld

Skip cache slot when time-to-live is zero

2014-02-21T00:19:45Z

If time-to-live is set to zero, we don't need to regenerate the cache slots on every request. Instead, just skip the caching process and immediately provide the dynamically generated version of the page. Setting time-to-live to zero is useful when you want to disable caching for certain pages. Signed-off-by: Lukas Fleischer

Add a cache-snapshot-ttl configuration variable

2014-02-20T18:56:44Z

This can be used to specify the TTL for snapshots. Snapshots are usually static and do not ever change. On the other hand, tarball generation is CPU intensive. One use case of this setting (apart from increasing the lifetime of snapshot cache slots) is caching of snapshots while disabling the cache for static/dynamic HTML pages (by setting TTL to zero for everything except for snapshot requests). Signed-off-by: Lukas Fleischer

auth: have cgit calculate login address

2014-01-16T22:21:54Z

This way we're sure to use virtual root, or any other strangeness encountered. Signed-off-by: Jason A. Donenfeld

authentication: use hidden form instead of referer

2014-01-16T11:13:39Z

This also gives us some CSRF protection. Note that we make use of the hmac to protect the redirect value. Signed-off-by: Jason A. Donenfeld

auth: add basic authentication filter framework

2014-01-16T01:28:12Z

This leverages the new lua support. See filters/simple-authentication.lua for explaination of how this works. There is also additional documentation in cgitrc.5.txt. Though this is a cookie-based approach, cgit's caching mechanism is preserved for authenticated pages. Very plugable and extendable depending on user needs. The sample script uses an HMAC-SHA1 based cookie to store the currently logged in user, with an expiration date. Signed-off-by: Jason A. Donenfeld