192
Would you use an EU-hosted GitHub alternative? (vault42.eu)
submitted 2 days ago by to c/buyeuropean@feddit.uk
51 comments fedilink hide all child comments
 

Hi all,

I am trying to find out if there is interest in a hosted Forgejo service with a strong emphasis on EU sovereignty and independence from big tech. Forgejo is an open-source Git hosting platform that I think is great and deserves wider use. For that reason, we will donate 5% of our plan revenue to the Forgejo project.

The plan is to cover what developers and small teams need:

  • Forgejo for Git hosting
  • Servers at Scaleway (a European cloud provider)
  • CI/CD runners
  • Dependency vulnerability alerts on every plan
  • Daily backups
  • Other essentials, as listed on our features page

Vault42 (that's us) has no US parent company and uses only EU-based subprocessors, so your code stays outside US jurisdiction. ISO 27001 certification is a goal for later on.

The focus will be on private repositories, since Codeberg already serves open-source projects very well. There will also be a free plan for open source with unlimited public repositories, not to compete with Codeberg but to give people another option.

If this interests you, you can join the waitlist at vault42.eu.

Questions and suggestions are welcome in the comments or by DM.

Cheers,

Marijn from Vault42

Disclosure: I am the founder of Vault42.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [S] 20 points 2 days ago* (last edited 2 days ago) (2 children)

Hi FiniteBanjo,

Thanks for your reply and kindness :)

You are right that Codeberg does offer private repo's but it's under a pretty limiting set of rules, especially for commercial projects, which is more my aim. See https://docs.codeberg.org/getting-started/faq/#how-about-private-repositories?

[...] If you do not contribute to free/libre software (or if it is limited to your personal homepage), and we feel like you only abuse Codeberg for storing your commercial projects or media backups, we might get unhappy about that.

Codeberg is great for open source though. Vault42 is meant for the private and client work that falls outside their scope.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] 2 points 1 day ago (1 child)

    You're not going to scale on Forgejo, or at least Codeberg isn't managing it. Since AI scrapping has become rampant they are struggling with availability.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [โ€“] [S] 1 point 17 hours ago

    Good point. Codeberg did end up putting Anubis, a proof-of-work challenge, in front of their instance, and as far as I can tell their problems came mostly from AI crawlers rather than from Forgejo itself. A large public forge is exactly what those crawlers target.

    Vault42 is aimed mainly at private repositories, which crawlers cannot reach, but our free tier does allow public repositories, so we are not immune. That part of the service needs the same protection, and we plan to handle it with:

    • Rate limiting, with stricter limits for anonymous traffic
    • Anubis or a similar proof-of-work proxy for anonymous visitors
    • Restricting expensive operations such as archive downloads and blame views to signed-in users

    Because most of our traffic will come from signed-in users working on private code, the exposure is much smaller than Codebergโ€™s, but it is certainly something to take seriously.

    Thanks for pointing that out!

  • permalink
  • fedilink
  • source
  • parent