Another lightweight alternative is to use kallithea (venv install) and put it behind apache. You will get web repo browser as a bonus :-) Regards, Łukasz On 18/06/2024 22.42, David C. Rankin wrote:
On 6/18/24 05:35, Carl Lei wrote:
Oh, I meant to run another apache instance, serving only the git CGI, and reverse-proxy from your main HTTP server to this dedicated git server. Actually it need not be apache, any kind of server capable of running CGI will do fine.
That I'll have to digest. Sounds like a good fix. For ssh, if everything is owned by a 'git' user, we would also need to have dedicated certificates for that user?
I'll start reading about setting up a second instance and the proxy world. I'll also hope (strongly) the git kernel list discovers they have a few side-effects of fixing the CVEs in the latest version and publish a fix that makes it all transparent. (hope, but not plan on ...)