when attempting to do an authorized request while logged-out, the auth
middleware boots the user to the login page. this page now keeps track
of the 'Referer' in the oauth request. once the oauth callback is
complete, the user is sent back to the page they came from.

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

- `inline-block` on li was too general, this only applies on
`li:has(input)` now
- all styles have been moved to input.css and apply only to children of
prose

Signed-off-by: oppiliappan <me@oppi.li>

- initialize sanitizer once, and reuse for life
- improve policies, and allow sanitizer to hold multiple policies
(this will come in handy, for PR titles, repo description, profiles
description etc.)
- add general safe items to allow list, most of these are generated by
goldmark GFM

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

this simplifies the error collection logic a lot.

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Even though nothing in this folder would match the extensions we watch,
probably makes sense to not even waste the cycles doing so.

Signed-off-by: Winter <winter@winter.cafe>

This also switches away from `nixos-shell` in the process as by this
point it wasn't really adding much to our setup except inflexibility.

Signed-off-by: Winter <winter@winter.cafe>

It's unidiomatic, and doesn't allow extension by way of changing the
systemd service options (like is done in the following commit).

Signed-off-by: Winter <winter@winter.cafe>

7a076be1af4677a7246a792fecb463e4e6f1afee, but for the actual file *tree*
template (used anywhere we show a diff of a tree).

Signed-off-by: Winter <winter@winter.cafe>

non-forked repos show a book icon, forked repos show a fork icon

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

adds a fork indicator to the repo lists in the profile, if repo is forked

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

I think it'd be nice to make setting `TANGLED_VM_SPINDLE_OWNER`
optional and run VMs without a spindle in that case, but
let's just document the status quo for now.

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: Winter <winter@winter.cafe>

This allows us to be more precise when downloading e.g. tags that have the
same name as branches (in which case Git defaults to the branch, not sure
what go-git does).

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: glomdom <sadonkovkiril@gmail.com>

Signed-off-by: glomdom <sadonkovkiril@gmail.com>

adds a little bit of javascript to close dropdowns in the topbar when clicking outside of them

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Minor, but important fixups

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

This functionality seems to be available since jj 0.29.

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

I'm so sick of this thing rebuilding every time I reload my devshell.

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: oppiliappan <me@oppi.li>

hopefully people use their existing handles now

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Picking up https://github.com/nix-community/gomod2nix/commit/7f963246a71626c7fc70b431a315c4388a0c95cf.

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: Seongmin Lee <boltlessengineer@proton.me>

after changing the sshd config, it's necessary to reload ssh. added instructions on how to do this to the self-hosting guide

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

This change correctly points /knots to https://tangled.sh/knots instead
of https://tangled.sh/@tangled.sh/core/tree/master/knots

Signed-off-by: Samuel Shuert <me@thecoded.prof>

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

Change-Id: uxnwsxtukznolvmwopkpxmtsvztvsusu

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: Winter <winter@winter.cafe>

rev-list was over-counting

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>

Signed-off-by: oppiliappan <me@oppi.li>

this file is unused

Signed-off-by: oppiliappan <me@oppi.li>

It's noisy, especially upon entering every devshell.

Signed-off-by: Winter <winter@winter.cafe>

thanks @winter.bsky.social for the report!

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

Signed-off-by: Safwan Parkar <safwanparkar6@gmail.com>

SQLite stores byte sequences as blobs, which we were not handling properly,
causing (at least) actions relating to artifacts to break. (Not sure
when they broke, sorry!)

Signed-off-by: Winter <winter@winter.cafe>

h/t https://github.com/bluesky-social/indigo/issues/931#issuecomment-2635675099
for the inspiration

Signed-off-by: Winter <winter@winter.cafe>

Needed now that we're isolating things for everyone.

Signed-off-by: Winter <winter@winter.cafe>

I personally don't like that nixos-shell inherits a ton of stuff from the
host by default, even mounting my home directory as r/w! I imagine I'm not
the only one with this opinion, so let's put a stop to it by default.

Signed-off-by: Winter <winter@winter.cafe>