Is running the git binary as a read-only nginx backend not good enough? Probably not. Hosting tarballs is far more efficient.