#+TITLE: Configuration of gerrit

A gerrit instance is running at [[https://cl.fcuny.net][cl.fcuny.net]].

* Permissions
- branches other than main can be pushed to the server
- the main branch can only be modified by gerrit
* Secure configuration
The file =/var/lib/gerrit/etc/secure.config= is not (yet) managed by nix. The file contains:
#+begin_src ini
[auth]
  registerEmailPrivateKey = <redacted>
[sendemail]
  smtpUser = <fastmail user>
  smtpPass = <fastmail SMTP password>
[plugin "gerrit-oauth-provider-google-oauth"]
  client-secret = <google oauth secret>
#+end_src