Skip to content

v0.7.0

Choose a tag to compare

View all tags
@Reutertu3 Reutertu3 released this 27 Sep 21:13
· 34 commits to master since this release
v0.7.0
f4e2b92

pcbgit v0.7.0

Two-factor sign-in

  • Optional for every account under Settings → Two-factor sign-in: scan a QR code with any authenticator app and keep the one-time recovery codes.
  • The code is asked for once when signing in. The session then lasts the usual 30 days. git push keeps using access tokens.
  • Turning it on signs out your other devices. Turning it off, or making new recovery codes, needs your password.

Admin accounts

  • Only the owner can demote an admin or reset an admin's password or 2FA, so one compromised admin account can no longer take over the others.
  • Admins can turn off 2FA for regular users who lost their authenticator.

Locked-out owner

If the owner loses both password and 2FA, run this on the server:
docker compose exec pcbgit node --import ./tests/resolve-hook.mjs scripts/reset-owner.ts </dev/null
It prints a new password, turns 2FA off and ends the owner's sessions.

Smaller changes

  • Footer: the site name links to the site itself, and Source goes to the repository.
  • Front page banner: vias and pin teardrops on the drawn board.

The database gets its new columns automatically on first start.

Assets 2
Loading