Hacker News Reader

Comment by adamddev1 | Hacker News Reader

I was in a very similar situation and this is what I did:

- put Forgejo on a little $5 Vultr VPS (I share the VPS with other things, Forgejo doesn't need much resources. I also added some block storage to host my Docker containers in the Forgejo Docker registry)

- got a 8GB ram cheaper Hetzner VPS (you have to wait for their availability) for around 8 EUR and used that to install the CI runner

- Use Netlify for hosting static sites and PWA

It takes a bit to set up but everything works snappy, clean, and flawlessly. I have unlimited CI minutes. As a bonus I get free Docker image and registry hosting because it's included with Foregejo. I am so, so happy with it all.

Also with Forgejo you just feel like you're using something clean and solid. GitHub started to feel more and more bloated, slow, and unstable.

View on HN

I've been very happy with forgejo for a personal, private server.

I don't care much about the social aspects of GitHub, but I do care a ton about hosting code for long periods of time, long after I've completely changed my personal homelab.

GitHub's most essential service for me is it being the equivalent of the Internet Archive, but for code.

Similar! I was tired of the outages and crazy runner bills so I just finished moving everything to my own server hosting Forgejo. I've had to recreate a couple things (like a dependabot replacement) but it's been a week so far and it's going well - I haven't had any outages nor have I been finding ways to lessen my Runner billed minutes.

Forgejo has some quirks (like no ability to share workflows between private repos) but I'm happy with my choice so far.

Great setup, two questions, do you have 2 VPNs now or all on one Hetzner VPS? And how do you setup security?

Just recommend swapping vercel/netlify with something else, we had quite a few issues and high costs with them. Not opiniated here, currently using Cloudflare and BunnyCDN (which is great)

I just SSH into the servers when I need to. I don't have any VPNs with these servers. I just try to follow normal server security setup practices, disabling password authentication etc.

That’s what I do. Sensible firewall rules with ufw, turn off services I don’t use, follow the docs for the services I do. For a handful of servers the maintenance overhead is fine.

I worried being behind in server-security, since all those 0days now being so easy to pull from claude/chatgpt, that maybe you guys found a risk-minimizing front-end to reduce the attack-surface.

This sounds great for personal projects, but what about open source work? Or if you want to collaborate with more than a few people?

https://codeberg.org/

Unless you want those people to have merging rights, collaboration can be easily done with exporting a read-only version of the git repo via http (even a browsable one using cgit). Then anyone can work on their copy, generate patches (git format-patch) and send the files via any means of communication (email, slack,...).

https://about.gitlab.com/solutions/open-source/

gitlab ultimate (minus support) for free, so long as licenses for all projects are OSI approved.

Yeah this was kind of where I was going. Gitlab is great.

Reply on news.ycombinator.com