vole

Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Serve repositories from the root of the URL space

ed03b3d1fa16ef6b55e2773aaf10e3be13282c3a · Keenan Nemetz · 9h ago · parent d37d301f

Serve repositories from the root of the URL space

A repository is now /<name> and its Git transport /<name>.git, so the URL a
person opens, the URL a clone uses, and the Go module path are the same name.
The forge's own pages moved under /-/ (admin, accounts, the directory, the
feed, sign-in, assets), a prefix no repository name can start with: names are
[a-z0-9...] and cannot begin with "-". That leaves the router with two disjoint
spaces and removes the /r/ and /git/ prefixes, which existed only to keep
repositories away from the forge's own paths.

Routes: repoRoutes lose /r/; global, auth and admin routes gain /-/; assets
move to /-/static/ because a subtree pattern like /static/ cannot coexist with
one-segment-wildcard repo routes — Go's mux reports them as conflicting
neither-more-specific patterns. The catch-all still renders the styled 404.

Transport: githttp.Route parses /<name>.git/<rest> instead of a /git/ prefix,
and forgepaths.go hands such requests to the proxy before the mux, because a
wildcard fills a whole segment and cannot match "<name>.git". LFS stays on the
mux (<name>.git/info/lfs/...), and the Go module discovery probe moves to the
same pre-router so a package path under a public repository is answered even
when its first segments name a page tab.

Names: repo.ValidateName now refuses the four root paths the forge must keep —
static, robots.txt, sitemap.xml, sitemap-pages.xml. Everything else is an
ordinary repository name, including admin, u, and activity.

Docs and the packaged URLs follow the new layout; robots.txt, the sitemaps and
the instance activity feed point at the new paths. No aliases: the old /r/ and
/git/ URLs are gone.

Verified with ./vole workflow check and ./vole workflow run verify.

server/web/templates.go +2−2

@@ -19,7 +19,7 @@ package web
	19	19	// after the element it renders. A fragment that both surfaces render keeps the
	20	20	// shared name instead (comment_thread, comment_card, tree_nodes, pager).
	21	21	//
	22		// Static assets are served from /static/ and never inlined into a template. The
		22	// Static assets are served from /-/static/ and never inlined into a template. The
	23	23	// passkey script is a static asset too; it runs under the same CSP as the rest.
	24	24	// theme.js is loaded before the stylesheet on purpose: it applies the saved
	25	25	// Everforest variant, or the system light/dark medium default, to <html> before
@@ -84,7 +84,7 @@ func newStatic() http.Handler {
	84	84	panic(err)
	85	85	}
	86	86	return http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
	87		f, ok := files[strings.TrimPrefix(r.URL.Path, "/static/")]
		87	f, ok := files[strings.TrimPrefix(r.URL.Path, "/-/static/")]
	88	88	if !ok {
	89	89	// No directory listing and no path traversal: the embedded set is the
	90	90	// whole surface, and a miss is a 404.