anvil

A git forge built using gitoxide.

Architecture

A Cargo workspace. The keystone is anvil-git: gix is a client library with no server-side protocol, so anvil supplies its own transport-agnostic upload-pack/receive-pack (smart-HTTP and SSH share one implementation).

Crate	Responsibility
anvil-core	Domain model, SQLite persistence, on-disk bare-repo storage
anvil-git	Server-side git wire protocol on gix (upstream-candidate)
anvil-web	axum HTTP server: web UI + smart-HTTP git endpoints
anvil-ssh	git-over-SSH (russh)
anvil-cli	anvild daemon + admin CLI

Quick start

cargo run -- migrate                              # create data/ + database
cargo run -- user create alice --password secret  # create a user
cargo run -- repo create alice/hello              # create a bare repo on disk
cargo run -- serve                                # start the server

Configuration is optional; see anvil.example.toml. PORT/HOST and ANVIL_BASE_URL (or PORTLESS_URL) override the listen address and public URL, so a proxy can place anvil without a config file.

To run it the way it runs in production — in Docker, with CI able to reach the host's Docker socket — use ./deploy/dev.sh, which builds the image, starts a container, and (with portless) serves it over HTTPS at https://anvil.localhost.

Docs

• CI artifacts
• Single sign-on — OIDC sign-in, alongside passwords
• Repository secrets — encrypted to your ssh keys in the browser; anvil stores ciphertext it cannot open
• Threat model for untrusted users