AURcade

A tiny Git host with cgit over HTTP and authenticated pushes over SSH.

AURcade cgit interface

cgit provides the web interface and HTTP clones.
SSH provides authenticated Git access.
config.toml defines accounts, SSH keys, and repository paths.

Run

Create a directory:

mkdir aurcade
cd aurcade

Create config.toml:

title = "AURcade"
description = "My Git repositories"
clone_prefix = "http://localhost:8080 ssh://git@localhost:2222"
style = "cgit-theme.css"
logo = "aurcade-logo.svg"
favicon = "aurcade-favicon.svg"

[[accounts]]
name = "alice"
ssh_keys = ["ssh-ed25519 REPLACE_WITH_YOUR_PUBLIC_KEY"]
gpg_keys = []
gpg_key_files = []
paths = ["alice/"]

docker run -d \
  --name aurcade \
  --restart unless-stopped \
  -p 8080:80 \
  -p 2222:22 \
  -v "$PWD/config.toml:/etc/aurcade/config.toml:ro" \
  -v "$PWD/keys:/etc/aurcade/keys:ro" \
  -v ./repositories:/var/lib/aurcade \
  -v ./ssh-host-keys:/etc/ssh/host_keys \
  ghcr.io/skorotkiewicz/aurcade:latest

With Compose:

docker compose pull
docker compose up -d

Build locally instead:

docker compose up --build -d

Open http://localhost:8080. After configuration changes, run docker restart aurcade.

Access

paths = ["example", "team/tools"] # An exact path grants access to one repository.
paths = ["alice/"]  # Namespace; creates repositories on first push.

Connect without a Git command to open the account's SSH lobby. Its 53-week activity calendar counts only commits on repository default branches with trusted SSH signatures belonging to that account:

ssh -p 2222 git@localhost

Git

git clone ssh://git@localhost:2222/example.git

git remote add origin ssh://git@localhost:2222/alice/newrepo.git
git push -u origin main

Soft-delete an owned, non-shared repository by moving it into .aurcade-trash/ inside the repository mount:

ssh -p 2222 git@localhost delete alice/old-repo --confirm alice/old-repo

Signed commits

SSH-signed commits are verified with the account's ssh_keys. For GPG signatures, add complete armored public keys:

gpg_keys = ['''
-----BEGIN PGP PUBLIC KEY BLOCK-----
...
-----END PGP PUBLIC KEY BLOCK-----
''']

Export one with gpg --armor --export FINGERPRINT. Alternatively, reference public-key files available inside the container:

gpg_key_files = ["keys/alice.asc"]

Key-file paths must begin with keys/, relative to config.toml. Invalid or missing GPG keys are ignored with a startup warning. Restart AURcade after changing keys.

Metadata

Add .aurcade to a repository:

A tiny repository with an unnecessarily dramatic README

Metadata refreshes after each push. Repositories shared by multiple accounts appear under shared.