92
Remote Code Execution in Forgejo? (dustri.org)
submitted 6 months ago by to c/selfhosted@lemmy.world
37 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 6 months ago (4 children)

What's a good alternative? I'm not 100% sold on forgejo either due to some bugs and security issues I've run into as well, but I've found few self-hosted alternatives that are a good fit. I need very little beyond a git repo. But I like having the web UI for reviewing code and pull requests and basic issue tracking and need that to support OIDC, but otherwise I'm open. I want something relatively lightweight, fully FOSS, and telemetry and all other external communication can be disabled.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 25 points 6 months ago (1 child)

    Forgejo is fine. Don't expose it to the internet unless you have to, or mirror your repos to Codeberg and let them worry about it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 6 months ago (1 child)

    If I like having a web UI means you can do without it, git doesn't require anything fancy. I just have my git repos on my server and push/pull from my workstations over SSH. It doesn't require anything but git & SSH on the server. You can even collaborate with others by giving them a locked down account that can't do anything other then interact with the git repo.

    This approach certainly isn't for everyone. The web UI can be super handy, but if you just want your own self-hosted git server, keep it simple.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •