From ee42ceb023a709916cca5652985cffed4ab43c6e Mon Sep 17 00:00:00 2001 From: thhsh Date: Mon, 7 Jul 2025 11:29:08 -0400 Subject: [PATCH] Update forgejo.md Add break-glass local account enable info. --- docs/handbook/infrastructure/code/forgejo.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/handbook/infrastructure/code/forgejo.md b/docs/handbook/infrastructure/code/forgejo.md index 062d979..d0abf0f 100644 --- a/docs/handbook/infrastructure/code/forgejo.md +++ b/docs/handbook/infrastructure/code/forgejo.md @@ -9,7 +9,9 @@ We use a self-hosted Forgejo instance for our Git source code hosting. **Project group**: `SCsys_hosted` **Configuration repo**: [:simple-forgejo: starcat-infra/git-server](https://git.starcat.systems/starcat-infra/git-server) - +## Notes +### Disabling OIDC +By default, Forgejo is set up to force users to use Pocket (StarCat ID) to log in. In case Pocket is not working, we can change a line in `app.ini` to show the local login form. See [:simple-forgejo: `app.ini` line 79](https://git.starcat.systems/starcat-infra/git-server/src/commit/f802febff4ae34eceb312f538e867c1615471ca4/forgejo/app_ini/app.ini#L79). SSH to the server with a sudo-capable account, open `app.ini`, and change the line `ENABLE_INTERNAL_SIGNIN = false` to `ENABLE_INTERNAL_SIGNIN = true`, then restart Forgejo. Then, you can log in with a local break-glass account (see 1Password). ---