vole
Clone
Read only, no credentials:
https://rodent.software/git/vole.git
Write over SSH with a registered key:
git clone ssh://git@0.0.0.0:2222/vole.git
A free and open-source forge that lives in your Git repo.
Serve repositories from the root of the URL space
ed03b3d1fa16ef6b55e2773aaf10e3be13282c3a · Keenan Nemetz · 4h ago · parent d37d301f
Serve repositories from the root of the URL space A repository is now /<name> and its Git transport /<name>.git, so the URL a person opens, the URL a clone uses, and the Go module path are the same name. The forge's own pages moved under /-/ (admin, accounts, the directory, the feed, sign-in, assets), a prefix no repository name can start with: names are [a-z0-9...] and cannot begin with "-". That leaves the router with two disjoint spaces and removes the /r/ and /git/ prefixes, which existed only to keep repositories away from the forge's own paths. Routes: repoRoutes lose /r/; global, auth and admin routes gain /-/; assets move to /-/static/ because a subtree pattern like /static/ cannot coexist with one-segment-wildcard repo routes — Go's mux reports them as conflicting neither-more-specific patterns. The catch-all still renders the styled 404. Transport: githttp.Route parses /<name>.git/<rest> instead of a /git/ prefix, and forgepaths.go hands such requests to the proxy before the mux, because a wildcard fills a whole segment and cannot match "<name>.git". LFS stays on the mux (<name>.git/info/lfs/...), and the Go module discovery probe moves to the same pre-router so a package path under a public repository is answered even when its first segments name a page tab. Names: repo.ValidateName now refuses the four root paths the forge must keep — static, robots.txt, sitemap.xml, sitemap-pages.xml. Everything else is an ordinary repository name, including admin, u, and activity. Docs and the packaged URLs follow the new layout; robots.txt, the sitemaps and the instance activity feed point at the new paths. No aliases: the old /r/ and /git/ URLs are gone. Verified with ./vole workflow check and ./vole workflow run verify.
server/web/web.go +4−11
| @@ -157,23 +157,16 @@ func (w *Web) notFound(rw http.ResponseWriter, r *http.Request) { | |||
| 157 | 157 | }{w.page(r, "Not found"), "That page does not exist, or you do not have access to it."}, http.StatusNotFound) | |
| 158 | 158 | } | |
| 159 | 159 | ||
| 160 | // NotFoundPage is the catch-all route. A Go module lookup arrives here, because | ||
| 161 | // <host>/<repository> is a module path rather than a page the forge serves; the | ||
| 162 | // discovery probe is answered before the path falls through to the styled 404. | ||
| 163 | func (w *Web) NotFoundPage(rw http.ResponseWriter, r *http.Request) { | ||
| 164 | if w.goModuleMeta(rw, r) { | ||
| 165 | return | ||
| 166 | } | ||
| 167 | w.notFound(rw, r) | ||
| 168 | } | ||
| 160 | // NotFoundPage is the catch-all route. It uses the same view as every other 404. | ||
| 161 | func (w *Web) NotFoundPage(rw http.ResponseWriter, r *http.Request) { w.notFound(rw, r) } | ||
| 169 | 162 | ||
| 170 | 163 | // loggablePath is a request path with any secret in it removed. An enrollment | |
| 171 | 164 | // link used to carry its token as a path segment, and a log is read by far more | |
| 172 | 165 | // people than a link is sent to; a client following an old link must not be able | |
| 173 | 166 | // to put that secret in the log by making the page fail. | |
| 174 | 167 | func loggablePath(p string) string { | |
| 175 | if strings.HasPrefix(p, "/invite/") { | ||
| 176 | return "/invite/[redacted]" | ||
| 168 | if strings.HasPrefix(p, "/-/invite/") { | ||
| 169 | return "/-/invite/[redacted]" | ||
| 177 | 170 | } | |
| 178 | 171 | return p | |
| 179 | 172 | } | |