Hm. I have something like this already setup privately. It's just a Node.js app that routes post requests to the private-access git address. I suppose I should clean it up and release it.