vole

Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Budget only the untrusted write role

e5542ac6b64fa3ebaf62af4831e55996dba45e7e · Keenan Nemetz · 12d ago · parent 9e8cc155

Budget only the untrusted write role

Maintainers and admins are trusted roles: they can already change the
rules, push shared branches and run the instance, so a write budget would
slow their work without bounding anybody who could not do worse. The
budget now applies only below maintain, which is the contribute role and
the read-only accounts that cannot write at all.

The setting is named for what it does: contributor_writes_per_hour. The
role is the effective one on the repository, so an instance-wide
maintainer on a public repository is exempt for the same reason a
repository maintainer is.

docs/operations.md +3−2

@@ -197,8 +197,9 @@ the linked sections explain each in full.
	197	197	moves no refs, and the object bound is enforced on upload. When one bites, the
	198	198	message names it: raise it in `vole.toml`, delete the branches or metadata that
	199	199	are not wanted, or run `vole admin gc` to drop unreachable objects. Per-account
	200		browser writes are budgeted too (`account_writes_per_hour`, 300); a person
	201		discussing never reaches it.
		200	browser writes are budgeted for the untrusted (`contribute`) role too
		201	(`contributor_writes_per_hour`, 300); a person discussing never reaches it, and
		202	maintainers and admins are trusted roles that are not budgeted at all.
	202	203	- Conservative limits. The defaults are chosen for a small instance:
	203	204	`git_http_max_concurrent = 16`, `git_http_max_per_client = 8`,
	204	205	`ssh_max_connections = 64`, `ssh_max_git_processes = 16`,