Git Web Service that allows HTTP?
reddit / selfhosted

----------------------------------------------------------------------
PunishedRaion · 2023-12-15 05:30

So previously I have ran a gitea instance. Due to various
circumstances this is not my preferred system to be running but chief
among them is the fact that it doesn't permit both HTTP and HTTPS.
When I try to set the base URL agnostically it constantly has a big
red error box at the top indicating URL mismatches.

I need an application that can run over HTTP because we have to have a
backup if our SSL cert gets revoked or expires. So yeah, that's where
I'm at. Let me know if a better alternative exists.

----------------------------------------------------------------------
ElevenNotes · 2023-12-15 05:43

You do that classical problem solving phallacy. You don’t solve the
problem (expiring certs) but try to find a work around. If everyone
would have problems replacing certs, HTTPS wouldn’t exist. Why do you
have problems replacing certs? In 2023 this is all done full auto by
the reverse proxies, bet it Traefik or Nginx or any big appliances.
Are you not using any of these technologies?

----------------------------------------------------------------------
niceman1212 · 2023-12-15 07:36

I would not do this as a failover scenario. Why don’t you make a self-
signed cert from a private CA and load those ICE?

----------------------------------------------------------------------
Simon-RedditAccount · 2023-12-15 11:10

cgit with nginx configured to serve both HTTP and HTTPS will work.

But in reality, just get your certs done right. Be it Let's Encrypt
via ACME, [your own homelab CA via
ACME](https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-
yubikey/), *or just a reminder on your phone a week/month prior to
expiration* `/s`.

----------------------------------------------------------------------
PunishedRaion · 2023-12-15 12:18

I CANNOT use just TLS, sorry.

----------------------------------------------------------------------
PunishedRaion · 2023-12-15 12:19

Because I have some systems that do not support TLS.

----------------------------------------------------------------------
PunishedRaion · 2023-12-15 12:20

Because nothing is that simple with my setups, I'm sorry.

----------------------------------------------------------------------
Erutan409 · 2023-12-15 12:26

You really should hunker down and learn reverse proxy solutions like
Nginx and certbot (Let's Encrypt).

It's honestly not that difficult to maintain once you learn the tech
stacks.