Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add instance user administration

395554f453ca31d3bd325920a7011c91230e961c · Keenan Nemetz · 15d ago · parent 8e93a8f0

Add instance user administration

Instance admins get an Admin -> Users surface: create an account from a one-time enrollment link, grant or revoke instance admin, retire an account, refresh its invite, inspect keys and sessions, remove a key, and revoke every session. Account creation uses CreateWithInvite, so the browser never asks an operator to paste somebody else's SSH key. Enrollment links are rendered once with no-store and warn when browser login is disabled. Retiring and admin changes keep the store's last-admin guard and audit trail.

docs/users-and-access.md +5

@@ -119,6 +119,11 @@ manage that repository's branches and reviews; an instance admin can create user
119 119 and repositories and change access rules anywhere. Only instance admins may use
120 120 `--remote`.
121 121
122 Instance admins also get an **Admin** section in the browser. Today it covers
123 per-repository access rules and accounts: create an account from an enrollment
124 link, grant or revoke instance admin, retire an account, start a fresh enrollment
125 link, and inspect or revoke SSH keys and browser sessions.
126
122 127 The first instance admin must be granted on the host. Vole refuses to remove or
123 128 retire the last active instance admin, so a remote mistake cannot lock everyone
124 129 out. Add `--json` to any remote command for a machine-readable response: