(Self-)hosting costs real money:

https://opencollective.com/gothub/expenses/

We are about to send more than €2k, almost half our existing @gothub funds, to hosting companies. (This includes horrendous one-time setup fees which I somehow managed to negotiate down by 50%.)

When users rely on hosted services without paying for them, the costs are somehow being offset by someone else.

If you are moving your #git repositories to @Codeberg as so many of you seem to be doing now (good!), please donate regularly to keep them afloat long-term.

@gothub requires payments (as small as we can reasonably make them) to ensure that the ship won't sink as long as the costs can be offset by people using service or contributing to the fund. In this model, the more users we get, the cheaper we can get by spreading the costs.

Version control system #gameoftrees 0.118 has been released.

🐛​ Fix a security issue in got-portable: Ever since chroot-less operation was introduced in the 0.111 release, gotwebd could be tricked into reading #git repositories located outside its designated repository directory. The #OpenBSD version is not affected because it uses unveil to limit itself to this directory.

🕸️​ gotwebd is more snappy now that it actually processes requests in parallel based on the number of pre-forked workers set in the configuration file. This feature was already present but it did not work as intended.

❓​Parsing of gotwebd querystrings and FCGI parameters has been moved into a dedicated process which runs in chroot, and on #OpenBSD runs under pledge("stdio").

📁​ gotsysd no longer disables sftp/scp support in the generated sshd configuration file. This was disabled on purpose but not having it enabled is too inconvenient for system administrators.

https://gameoftrees.org/releases/changes.html

For the next release, we are working on authentication support for gotwebd, which will allow us to finally deploy gotwebd on @gothub

PSA: If you are running gotwebd from #gameoftrees -portable 0.111 (released 2025-04-22) or later on a machine which contains unrelated #git repositories that are supposed to remain secret you should ensure that the _gotwebd user cannot read those repositories, or stop gotwebd altogether until we have shipped a fix.

Servers running #OpenBSD are not affected by this problem.

What #OpenSource and #SelfHost can do. Had an idea, discussed it here. Seemed to rhyme with people. Booked two domains. Created a landing page with #Jekyll and CI/CD from a #git repo on my #Forgejo instance. Created logo with #Inkscape. Added #letsencrypt certificate. Put it on my VPS (Virtual Private Server) running Red Hat Enterprise Linux, (#RHEL) where it is now served with #Nginx. Git repo mirrored to #Codeberg so all can join. In under 8h.

https://devbnb.eu

https://codeberg.org/jwildeboer/devbnb

Alt...

Current simple landing page for devBnB. Simple, elegant design with a logo that renders fine from mobile to widescreen.

Alt...

Building the static pages for the website automatically with the forgejo runner that runs after every push to the repo.

#vcs #git #SoftwareManagement #PinkFloyd