Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Budget only the untrusted write role

e5542ac6b64fa3ebaf62af4831e55996dba45e7e · Keenan Nemetz · 13d ago · parent 9e8cc155

Budget only the untrusted write role

Maintainers and admins are trusted roles: they can already change the
rules, push shared branches and run the instance, so a write budget would
slow their work without bounding anybody who could not do worse. The
budget now applies only below maintain, which is the contribute role and
the read-only accounts that cannot write at all.

The setting is named for what it does: contributor_writes_per_hour. The
role is the effective one on the repository, so an instance-wide
maintainer on a public repository is exempt for the same reason a
repository maintainer is.

forge/config/validate.go +2−2

@@ -152,8 +152,8 @@ func (c *Config) Validate() error {
152 152 if c.RepoMaxMetadataEntries < 0 {
153 153 add("repo_max_metadata_entries must not be negative, got %d", c.RepoMaxMetadataEntries)
154 154 }
155 if c.AccountWritesPerHour < 0 {
156 add("account_writes_per_hour must not be negative, got %d", c.AccountWritesPerHour)
155 if c.ContributorWritesPerHour < 0 {
156 add("contributor_writes_per_hour must not be negative, got %d", c.ContributorWritesPerHour)
157 157 }
158 158 if c.PagesProcs < 0 || c.PagesProcs > 64 {
159 159 add("pages_procs must be between 0 and 64, got %d", c.PagesProcs)