By ‘Git instances’ they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

  • 1984@lemmy.today
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    People have open registration on those things… Thats… Brave…

    I have my own gitea instance in my homelab but of course its not accessable from the internet.

    • ITGuyLevi@programming.dev
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      I keep mine accessible from the internet, its just more useful to me like that. I do have registration disabled though and SSO is handled by Authentik so it could be worse (my personal goal has just been to not be the easiest target, perfect security is a myth in my mind).

      • Jason2357@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 day ago

        Theres a HUGE difference between hosting it essentially read-only to the world, vs allowing account creation, uploading, and processing unknown files by the server.

        I have thought of blocking access to the commit history pages at the reverse proxy to cut off 99% of the traffic from bots. If anyone wants to look at the history, its just a git clone away.

      • Jason2357@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 day ago

        You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge.

      • greedytacothief@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        I do the same thing. Anything I put on there isn’t something that I would share with the Internet anyway. If it was a serious project, sure. It’s just nice to have a personal git you can access over a VPN sometimes.

          • mko@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            0
            ·
            2 days ago

            For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public?

            Edit after spell check.

          • mic_check_one_two@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            0
            ·
            2 days ago

            Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public.

          • communism@lemmy.ml
            link
            fedilink
            English
            arrow-up
            0
            ·
            2 days ago

            For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too

      • 1984@lemmy.today
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          0
          ·
          2 days ago

          That kills collaboration from new people who just, like, discovered your project on some Lemmy thread

          • Natanael@infosec.pub
            link
            fedilink
            English
            arrow-up
            0
            ·
            2 days ago

            They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol