Enter git-forgeHEADmaster

A small self-hosted git forge: HTTP push and pull, cgit browsing,
local and OIDC accounts, TOTP, scoped push tokens, per-repo
permissions, issues, a wiki, and outbound mail.

It does not reimplement git. git-http-backend and cgit run as CGI
behind its own listener, which authorises every request before
exec'ing either. One binary, one data directory, one listener: no
database, no JavaScript, and state is JSON in a git repo with a
working tree.

1 files changed, 23 insertions, 0 deletions

diff --git a/templates/reset.html b/templates/reset.html
new file mode 100644
index 0000000..9025f2e
--- /dev/null
+++ b/templates/reset.html
@@ -0,0 +1,23 @@
+{{define "title"}}Forgotten password - {{.Site}}{{end}}
+{{define "main"}}
+<h2>Forgotten password</h2>
+{{if .MailOff}}
+<div class="error">
+Mail is turned off on this instance, so no link can be sent. Ask an admin for
+a one time link.
+</div>
+{{end}}
+<p>
+This mails a one time link to the address on file for the account. The answer
+below is the same whether or not the account exists, so that this page cannot
+be used to find out which names are taken.
+</p>
+<form method="post" action="/reset">
+<input type="hidden" name="csrf" value="{{.CSRF}}">
+<p>
+<label for="name">Account name</label>
+<input id="name" name="name" autocomplete="username" autocapitalize="none" required>
+</p>
+<p><button type="submit">Send the link</button></p>
+</form>
+{{end}}