3 ms·
I've been using GitBucket since about version 0.5.0 and I honestly liked the GitBucket UI better before the push to look just like GitHub. Feature-wise, it's b
by smoyer 11y ago
I've been using GitBucket since about version 0.5.0 and I honestly liked the GitBucket UI better before the push to look just like GitHub.
Feature-wise, it's behind both GitHub and GitLab, but for company internal repositories, it also doesn't me to risk the security of my server by running RoR. I lost a server to hackers (temporarily) due to an RoR vulnerability that was exposed through Redmine, so perhaps I'm a bit sensitive.
- icebraining 11y agoIf it's just for internal use, why not close off external access or put an authentication layer "over" the application? I have my personal services protected with Basic Auth¹, it's just a matter of running a command to create the passwords file and adding two lines to your Nginx config. ¹ With HTTPS, of course, but that should be used anyway, to protect the app's own authentication.
- tomschlick 11y ago> I lost a server to hackers (temporarily) due to an RoR vulnerability that was exposed through Redmine, so perhaps I'm a bit sensitive. That's more of a redmine vuln than a ruby one. Someone can write bad/vulnerable code in any language... I know, I write PHP daily :)