By ‘Git instances’ they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

  • 1984@lemmy.today
    link
    fedilink
    English
    arrow-up
    66
    ·
    edit-2
    1 day ago

    People have open registration on those things… Thats… Brave…

    I have my own gitea instance in my homelab but of course its not accessable from the internet.

      • Jason2357@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        9 minutes ago

        You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge.

      • 1984@lemmy.today
        link
        fedilink
        English
        arrow-up
        18
        ·
        1 day ago

        Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          1
          ·
          23 hours ago

          That kills collaboration from new people who just, like, discovered your project on some Lemmy thread

          • Natanael@infosec.pub
            link
            fedilink
            English
            arrow-up
            6
            ·
            22 hours ago

            They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol

      • greedytacothief@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 day ago

        I do the same thing. Anything I put on there isn’t something that I would share with the Internet anyway. If it was a serious project, sure. It’s just nice to have a personal git you can access over a VPN sometimes.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          13
          ·
          23 hours ago

          I can’t understand why anyone would waste time writing code that won’t be shared

          • greedytacothief@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 hours ago

            Dunno, I just don’t believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I’d rather share things worth sharing, that could be useful to someone else.

          • mic_check_one_two@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            8
            ·
            20 hours ago

            Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public.

            • AA5B@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              2 hours ago

              Home Assistant hs communities to share exactly that

              My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed”

          • mko@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            18 hours ago

            For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public?

            Edit after spell check.

          • communism@lemmy.ml
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            22 hours ago

            For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too

    • ITGuyLevi@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 hours ago

      I keep mine accessible from the internet, its just more useful to me like that. I do have registration disabled though and SSO is handled by Authentik so it could be worse (my personal goal has just been to not be the easiest target, perfect security is a myth in my mind).

      • Jason2357@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 minutes ago

        Theres a HUGE difference between hosting it essentially read-only to the world, vs allowing account creation, uploading, and processing unknown files by the server.

        I have thought of blocking access to the commit history pages at the reverse proxy to cut off 99% of the traffic from bots. If anyone wants to look at the history, its just a git clone away.