OneDev ftw :)
Github has been requiring authentication now for "untrusted" ip addresses. They also have aggressive rate limits such that a business running build server(s) will likely hit rate limits.
The reason that's a big deal is, many, even more commercial funded OSS projects, publish their artifacts exclusively on GitHub releases, or the GH container registry. Powershell is an example of this. They're not only locking down development, but also the public's access to the applications entirely. It's total control over software development and distribution.
nostr:npub1s3ht77dq4zqnya8vjun5jp3p44pr794ru36d0ltxu65chljw8xjqd975wz plans to help with this, but we aren't going to be an end-all solution. No single SaaS platform will be.
Devs should consider running their own git servers and artifact repositories for their projects. Other self-hosters and plebs can contribute by setting up git mirrors on just about any webserver. Mirror projects you care about!
Devs should also probably be signing their commits so that mirrors can be verified.
Final note. CodeBerg offers a GitHub 1 click repo migration tool.
Discussion
All day every day!
The NFDB/nostr.land code for example is managed on OneDev. Issue management is pretty great (I use it for non-code related tasks as well)
CI was extremely simple to set up, it starts a single-node FDB cluster and runs all the tests.
I'm still very green when it comes to CI but same for me as well. Tests, containers and so on!
I've even started using it for IaC for my load balancer network.
One other thing I did was use OpenBao for managing FDB cluster configuration.
That originally started with TLS certificate issuance only, but I needed to manage JWT signer keys as well, and then I put some other configuration in as well that was not completely security related since I didn’t want to deploy a 2nd tool.
Planning to set up an SSH CA soon.
Oh an SSH CA would be nice! Id like to handle my TLS as well, i'm not happy with my current setup. Still kind of manual for now. Everything was nice and simple until I expanded my LBs XD