By ‘Git instances’ they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

  • 1984@lemmy.today
    link
    fedilink
    English
    arrow-up
    64
    ·
    edit-2
    24 hours ago

    People have open registration on those things… Thats… Brave…

    I have my own gitea instance in my homelab but of course its not accessable from the internet.

        • Lightfire228@pawb.social
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          4 hours ago

          But it doesn’t have any built-in concept of users, write permissions, or authentication (except for commit signing)

          Hosting an unauthenticated git repo would be the equivalent to an open ssh port with no password required

          Not to mention collaborative things like issue tracking, PRs, forums, etc

          • JackbyDev@programming.dev
            link
            fedilink
            English
            arrow-up
            4
            ·
            4 hours ago

            Forgejo has all that, and then you can achieve “federation” by virtue of pushing to whatever remote. I wasn’t suggesting people use git itself (which is possible). I just meant that it’s distributed as opposed to centralized like Subverison is.

      • 1984@lemmy.today
        link
        fedilink
        English
        arrow-up
        18
        ·
        21 hours ago

        Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          1
          ·
          18 hours ago

          That kills collaboration from new people who just, like, discovered your project on some Lemmy thread

          • Natanael@infosec.pub
            link
            fedilink
            English
            arrow-up
            6
            ·
            18 hours ago

            They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol

      • greedytacothief@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        5
        ·
        21 hours ago

        I do the same thing. Anything I put on there isn’t something that I would share with the Internet anyway. If it was a serious project, sure. It’s just nice to have a personal git you can access over a VPN sometimes.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          13
          ·
          18 hours ago

          I can’t understand why anyone would waste time writing code that won’t be shared

          • mic_check_one_two@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            7
            ·
            16 hours ago

            Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public.

          • mko@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            14 hours ago

            For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public?

            Edit after spell check.

          • communism@lemmy.ml
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            18 hours ago

            For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too

    • ITGuyLevi@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      16 hours ago

      I keep mine accessible from the internet, its just more useful to me like that. I do have registration disabled though and SSO is handled by Authentik so it could be worse (my personal goal has just been to not be the easiest target, perfect security is a myth in my mind).