Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Allow opt-in open registration

f920a9f12c4ff12e4f47497a084f0201d8914181 · Keenan Nemetz · 15d ago · parent 6c84d387

Allow opt-in open registration

Add open_registration, off by default and effective only with an HTTPS public_url. /register creates an account and its first passkey without an administrator; the account row is written only after the WebAuthn ceremony succeeds, so an abandoned registration reserves no name.

New accounts start with no repository-specific ACL entries. Add self-service SSH key management on the Account page so a registered contributor can add the key needed to push to their contributor namespace.

Cover registration enablement, name validation, deferred account creation, and self-service key add/remove in tests, and document the policy.

README.md +3

@@ -58,6 +58,9 @@ link:
58 58 vole admin user create reporter
59 59 ```
60 60
61 To let people create their own accounts, set `open_registration = true` alongside
62 an HTTPS `public_url`. New accounts start with no repository-specific access.
63
61 64 New repositories are private. If someone opens a private repository on the web,
62 65 they get a `404` — the same answer as a repository that does not exist — so Vole
63 66 never confirms that it is there.