Comments on: Running Mercurial with FastCGI in nginx

By: Mathias

Mathias — Thu, 09 Jun 2011 23:05:33 +0000

Thanks a lot for the fail2ban filter

By: Peter

Peter — Mon, 24 Jan 2011 10:01:04 +0000

Hi Curtis, unfortunately I don’t have a solution for this problem. I also tried to get the limit_except approach working, but without success. I don’t need public access to my repository, so I did not investigate further.

By: Curtis Jewell

Curtis Jewell — Mon, 24 Jan 2011 09:49:52 +0000

Thanks for the how-to! Got things up and running. One question: How do you do public access to the repository while restricting pushes? The problem is illustrated in the nginx config below:

server { listen xx.xxx.xxx.xxx:443; server_name hg.curtisjewell.name; server_name hg; ssl on; ssl_certificate /.../hg.chained.crt; ssl_certificate_key /.../hg.key; access_log /.../hg.log;


    keepalive_timeout     70;
    location / {

        fastcgi_pass      127.0.0.1:xxxxx;
       fastcgi_param      PATH_INFO	         $fastcgi_script_name;

       fastcgi_param      QUERY_STRING	     $query_string;

       fastcgi_param      REQUEST_METHOD     $request_method;
       fastcgi_param      CONTENT_TYPE	     $content_type;

       fastcgi_param      CONTENT_LENGTH     $content_length;

       fastcgi_param      SERVER_PROTOCOL	 $server_protocol;

       fastcgi_param      SERVER_PORT         $server_port;

       fastcgi_param      SERVER_NAME         $server_name;
        fastcgi_param     GATEWAY_INTERFACE  CGI/1.1;

        fastcgi_param     SERVER_SOFTWARE    nginx/$nginx_version;
        fastcgi_param     REMOTE_ADDR        $remote_addr;

        fastcgi_param     REMOTE_PORT        $remote_port;

        fastcgi_param     REMOTE_USER        $remote_user;

# The commented lines, when commented, make pushing return a 401 because the user is not passed to hgweb. # limit_except GET { # do this for all requests but GET requests auth_basic "Mercurial repositories on curtisjewell.name"; auth_basic_user_file /var/hg/hgusers_basic; # } } }

Mercurial 1.4.3, nginx 0.7.65, by the way.

By: wumzi

wumzi — Wed, 21 Jul 2010 15:10:13 +0000

Great how-to !

Thanks !

By: Peter

Peter — Sat, 17 Oct 2009 08:24:24 +0000

You are right. Thanks for pointing out the error!

I updated the posting.

By: seth

seth — Sat, 17 Oct 2009 02:12:02 +0000

To answer my own problem.

The executable bit needs to be set on hgwebdir.fcgi
(chmod +x hgwebdir.fcgi)

Otherwise we get:
spawn-fcgi: child exited with: 2

Also (I could be incorrect), but instead of:
chmod -R www-data.www-data /tmp/hgtest

I think it was meant to be:
chown -R www-data.www-data /tmp/hgtest

Thanks for the great post!

By: seth

seth — Fri, 16 Oct 2009 23:06:16 +0000

After running

spawn-fcgi -a 127.0.0.1 -p 9001 -u www-data -g www-data -f /tmp/hgwebdir.fcgi -P /var/run/fastcgi-mercurial.pid -C 1

I get the following

spawn-fcgi: child exited with: 2

Any thoughts?

By: Michael Papenbrock

Michael Papenbrock — Tue, 15 Sep 2009 09:01:49 +0000

It’s running!!! Thank you very much!

By: Peter

Peter — Mon, 14 Sep 2009 14:58:18 +0000

Thanks, I forgot to mention this modification in my howto. The posting is now updated.

By: Markus Papenbrock

Markus Papenbrock — Mon, 14 Sep 2009 14:53:53 +0000

I ran into problems where an empty repository list was shown.
To solve this, you have to edit the file /tmp/hgwebdir.fcgi
Replace this line at the bottom:
WSGIServer(hgwebdir('hgweb.config')).run()
with a direct reference to the hgweb.config file:
WSGIServer(hgwebdir('/tmp/hgweb.config')).run()