auth.backend = "htpasswd"
auth.backend.htpasswd.userfile = "/run/git-host/secrets/htpasswd"

$HTTP["querystring"] =~ "(^|&)service=git-receive-pack(&|$)" {
  auth.require = ("" => ("method" => "basic", "realm" => "Git Host", "require" => "valid-user"))
}

$HTTP["url"] =~ "^/git/.*/git-receive-pack$" {
  auth.require = ("" => ("method" => "basic", "realm" => "Git Host", "require" => "valid-user"))
}