Mirror/gitea-mirror
1
0
Fork 0
mirror of https://github.com/RayLabsHQ/gitea-mirror.git synced 2025-12-11 05:56:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

v3.1.1

Browse Source
This commit is contained in:
Arunavo Ray
2025-07-23 06:52:35 +05:30
parent f2c7728394
commit 7b8ca7c3b8
2 changed files with 8 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
README.md
View File

@@ -109,7 +109,7 @@ docker compose up -d
#### Using Pre-built Image Directly #### Using Pre-built Image Directly
```bash ```bash
docker pull ghcr.io/raylabshq/gitea-mirror:v3.0.0 docker pull ghcr.io/raylabshq/gitea-mirror:v3.1.1
``` ```
### Configuration Options ### Configuration Options
@@ -126,8 +126,8 @@ PORT=4321
PUID=1000 PUID=1000
PGID=1000 PGID=1000
# JWT secret (auto-generated if not set) # Session secret (auto-generated if not set)
JWT_SECRET=your-secret-key-change-this-in-production BETTER_AUTH_SECRET=your-secret-key-change-this-in-production
``` ```
All other settings are configured through the web interface after starting. All other settings are configured through the web interface after starting.
@@ -201,7 +201,7 @@ bun run build
- **Frontend**: Astro, React, Shadcn UI, Tailwind CSS v4 - **Frontend**: Astro, React, Shadcn UI, Tailwind CSS v4
- **Backend**: Bun runtime, SQLite, Drizzle ORM - **Backend**: Bun runtime, SQLite, Drizzle ORM
- **APIs**: GitHub (Octokit), Gitea REST API - **APIs**: GitHub (Octokit), Gitea REST API
- **Auth**: JWT tokens with bcryptjs password hashing - **Auth**: Better Auth with session-based authentication
## Security ## Security
@@ -209,21 +209,12 @@ bun run build
- All GitHub and Gitea API tokens are encrypted at rest using AES-256-GCM - All GitHub and Gitea API tokens are encrypted at rest using AES-256-GCM
- Encryption is automatic and transparent to users - Encryption is automatic and transparent to users
- Set `ENCRYPTION_SECRET` environment variable for production deployments - Set `ENCRYPTION_SECRET` environment variable for production deployments
- Falls back to `BETTER_AUTH_SECRET` or `JWT_SECRET` if not set - Falls back to `BETTER_AUTH_SECRET` if not set
### Password Security ### Password Security
- User passwords are hashed using bcrypt (via Better Auth) - User passwords are securely hashed by Better Auth
- Never stored in plaintext - Never stored in plaintext
- Secure session management with JWT tokens - Secure cookie-based session management
### Upgrading to v3
**Important**: If upgrading from v2.x to v3.0, please read the [Migration Guide](MIGRATION_GUIDE.md) for breaking changes and upgrade instructions.
For quick token encryption migration:
```bash
bun run migrate:encrypt-tokens
```
## Authentication ## Authentication

2
package.json
View File

@@ -1,7 +1,7 @@
{ {
"name": "gitea-mirror", "name": "gitea-mirror",
"type": "module", "type": "module",
"version": "3.1.0", "version": "3.1.1",
"engines": { "engines": {
"bun": ">=1.2.9" "bun": ">=1.2.9"
}, },