I have a project with some team members and I want to setup a remote repository for our code.
If I want the code to ONLY be accessible by the team, in which directory should I create the repo (/var/www/?) and would enabling SSL and server authentication be enough to secure it?
Also is a certificate (selfsigned?) necessary?
in which directory should I create the repo
In any. It's not a question of physical|logical location
would enabling SSL and server authentication be enough to secure it?
No
Related
Recently transitioned hosting my website to Dreamhost from Netlify in order to host a dynamic site. One thing I miss is the ability to automatically deploy from Github to the hosting service when changes are detected in my repo.
I've found tutorials for pushing to Github from my Dreamhost server, but not the other way around. I have multiple people working on this website, and my hope is to do this centrall via Github instead of manually pushing to both Github and the Dreamhost server thru the command line.
My assumption is that to ssh to Dreamhost I need a public key from my client to store on the Dreamhost server. I don't know if this is possible to generate a public key from Github (related to the workflow), but if it is how I would I do it? The other option is to store the ssh credentials with Github repo secrets to connect, but I feel this isn't best practice.
How would I go about pushing my Github repo to my Dreamhost server automatically after changes to main?
Two different gists suggest the same approach.
Create a bare repo on the DreamHost server
push to it
have a post-receive hook doing the git restore in the target folder (on the same server) where the actual site is deployed
See "How to Git Push to a Server Machine without having to ssh on to that machine every time?"
What remains for your GitHub Action is, as describe in Deploying to a server via SSH and Rsync in a Github Action, to use a dedicated SSH key, whose private key is registered in GitHub secrets.
while trying to create a new repository or creating a new folder under current repository using subclipse in eclipse, i am getting an exception
org.apache.subversion.javahl.ClientException: Authorization failed
svn: Authorization failed
I am using ip address to communicate with server, both client and server connected on same network.
svn://192.168.1.40/newRepo
You cannot create a new repository on a server from the client. Repositories can only be created on the server itself or with a third party app like Subversion Edge that provides a web interface or something else for creating the repositories.
You can create a folder in an existing repository though. Your problem is clearly stated in the error you showed. Authorization failed. So this implies whatever user you provided as credentials to authenticate with the server did not have authorization to access it.
Chapters 5 and 6 of the SVNBook are very useful for setting up a server:
http://svnbook.red-bean.com/en/1.8/index.html
I have a remote svn repository on a centos server and a user called developer.
I want the developer user to be able to use svn+ssh://[path to repository] from his local machine using Subclipse in Eclipse, but not be able to ssh to the server or sftp.
Currently the developer user can ssh, sftp, and svn+ssh. I want to make it so he can ONLY svn+ssh using Subclipse in Eclipse. He should not be able to access the terminal or any other files outside of those in the repository.
The developer user logs in using a user name and password.
How can this be done?
Ended up allowing ssh and sftp access and denying access to literally every single command
Was wondering if there was a way of hosting a FTP server on github, and have it set up to use the FTP server from my Github page (username.github.io), like ftp://username.github.io
Can someone redirect me to an article or show me how to achieve this. Is there a repo I need to fork that does all this already?
Thanks
No, you can't host an FTP server on GitHub. Aside from its webpage hosting functionality, GitHub is not a general hosting service.
Using Visual Studio Team Services you have to enable Alternative Credentials in order to be able to connect to TFS Git Repo. using Eclipse or any other Git Client,
My problem is i want to connect to TFS on-premises Git repo. using Eclipse but there is no way to enable Alternative Credentials, any way to enable Alternative Credentials to be able to do that ? or can i do it other way?
TFS15 now supports Personal Access Tokens and SSH access, so your question isit's not entirely off the mark. There are scenario's where connecting using NTLM or kerberos security is not possible, but as #edward-thomson pointed out, the alternate credential is still linked to a domain account and should not be handed out to 3rd parties.
Instead users will need to be added to Active Directory, or a trust relation (or Federation) needs to be in place so the user is able to join using it's own orgs AD account.
If you're using Git, you could opt to also store the repository on Visual Studio Team Services and push/pull between that and your own TFS server. That way you can give 3rd parties access using their MSA or AAD account, while keeping the main repository secured using AD accounts only. Given the fact that Git is able to transfer data and history with ease, that's not an entirely weird scenario. It fits with the whole Distributed nature of Git quite well.