config: add ALLOW_PURE_SSH option

go-gitea · Sep 17, 2024 · b837c33 · b837c33
1 parent f3c77c2
commit b837c33
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/cmd/serv.go b/cmd/serv.go
@@ -287,6 +287,9 @@ func runServ(c *cli.Context) error {
  if !setting.LFS.StartServer {
  return fail(ctx, "Unknown git command", "LFS authentication request over SSH denied, LFS support is disabled")
  }
+ if verb == verbLfsTransfer && !setting.LFS.AllowPureSSH {
+ return fail(ctx, "Unknown git command", "LFS SSH transfer connection denied, pure SSH protocol is disabled")
+ }
  if len(words) > 2 {
  lfsVerb = words[2]
  }

diff --git a/modules/setting/lfs.go b/modules/setting/lfs.go
@@ -13,6 +13,7 @@ import (
 // LFS represents the configuration for Git LFS
 var LFS = struct {
  StartServer bool `ini:"LFS_START_SERVER"`
+ AllowPureSSH bool `ini:"LFS_ALLOW_PURE_SSH"`
  JWTSecretBytes []byte `ini:"-"`
  HTTPAuthExpiry time.Duration `ini:"LFS_HTTP_AUTH_EXPIRY"`
  MaxFileSize int64 `ini:"LFS_MAX_FILE_SIZE"`