From cfb78e4825e7d7cd62b553dc1d55d03694016515 Mon Sep 17 00:00:00 2001
From: Neal Gompa <ngompa@opensuse.org>
Date: Nov 17 2020 12:54:59 +0000
Subject: Merge branch 'ngompa/pagure-cfg-allow-http-push' into 'production'


pagure: Allow git push via HTTPS

See merge request infra/salt!455
---

diff --git a/pillar/role/pagure.sls b/pillar/role/pagure.sls
index 73ea875..56f7391 100644
--- a/pillar/role/pagure.sls
+++ b/pillar/role/pagure.sls
@@ -39,6 +39,7 @@ nginx:
                     - 80
                     - default_server
                 - location @pagure:
+                    - client_max_body_size: 0
                     - proxy_set_header: Host $http_host
                     - proxy_set_header: X-Real-IP $remote_addr
                     - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
diff --git a/salt/profile/pagure/files/pagure.cfg b/salt/profile/pagure/files/pagure.cfg
index 2ea0afc..92d6e17 100644
--- a/salt/profile/pagure/files/pagure.cfg
+++ b/salt/profile/pagure/files/pagure.cfg
@@ -63,6 +63,9 @@ SALT_EMAIL = '{{ pillar['profile']['pagure']['salt_email'] }}'
 ## anymore as a selection in the PR dropdown menus
 DISABLE_REMOTE_PR = False
 
+### Allow HTTP(S) pushes with local/token auth
+ALLOW_HTTP_PUSH = True
+
 ### The URL at which the project is available.
 APP_URL = 'https://code.opensuse.org/'
 ### The URL at which the documentation of projects will be available