@@ -44,6 +44,16 @@ There are a number of places where Gitea will generate commits itself:
44
44
Depending on configuration and server trust you may want Gitea to
45
45
sign these commits.
46
46
47
+ ## Installing and generating a GPG key for Gitea
48
+
49
+ It is up to a server administrator to determine how best to install
50
+ a signing key. Gitea generates all its commits using the server ` git `
51
+ command at present - and therefore the server ` gpg ` will be used for
52
+ signing (if configured.) Administrators should review best-practices
53
+ for gpg - in particular it is probably advisable to only install a
54
+ signing secret subkey without the master signing and certifying secret
55
+ key.
56
+
47
57
## General Configuration
48
58
49
59
Gitea's configuration for signing can be found with the
@@ -81,7 +91,7 @@ of the `user.signingkey`, `user.name` and `user.email` as appropriate.
81
91
82
92
Please note: by adjusting git's ` config ` file within Gitea's
83
93
repositories, ` SIGNING_KEY=default ` could be used to provide different
84
- signing keys on a per-repository basis. However, this is cleary not an
94
+ signing keys on a per-repository basis. However, this is clearly not an
85
95
ideal UI and therefore subject to change.
86
96
87
97
### ` INITIAL_COMMIT `
@@ -142,22 +152,16 @@ The possible options are:
142
152
Options other than ` never ` and ` always ` can be combined as a comma
143
153
separated list.
144
154
145
- ## Installing and generating a GPG key for Gitea
146
-
147
- It is up to a server administrator to determine how best to install
148
- a signing key. Gitea generates all its commits using the server ` git `
149
- command at present - and therefore the server ` gpg ` will be used for
150
- signing (if configured.) Administrators should review best-practices
151
- for gpg - in particular it is probably advisable to only install a
152
- signing secret subkey without the master signing and certifying secret
153
- key.
154
-
155
155
## Obtaining the Public Key of the Signing Key
156
156
157
157
The public key used to sign Gitea's commits can be obtained from the API at:
158
158
159
- ``` /api/v1/signing-key.gpg ```
159
+ ```
160
+ /api/v1/signing-key.gpg
161
+ ```
160
162
161
163
In cases where there is a repository specific key this can be obtained from:
162
164
163
- ``` /api/v1/repos/:username/:reponame/signing-key.gpg ```
165
+ ```
166
+ /api/v1/repos/:username/:reponame/signing-key.gpg
167
+ ```
0 commit comments