LibrePortal/LibrePortal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Stop the catalog site linking to a private git server

Browse Source 
The catalog page's "Open the catalog repo" button now only appears when
the operator sets a repo URL, and the catalog app no longer lists a
source URL.

Assisted-by: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
LibrePortal
2026-09-16 22:54:42 +01:00
parent 5b2bfe3d4a
commit d3420645bb
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
containers/libreportal_catalog/libreportal_catalog.config
+1 -1
View File
@@ -39,7 +39,7 @@ CFG_LIBREPORTAL_CATALOG_CATEGORY="system"
CFG_LIBREPORTAL_CATALOG_TITLE="LibrePortal Catalog"
CFG_LIBREPORTAL_CATALOG_DESCRIPTION="App Catalog & Registry"
CFG_LIBREPORTAL_CATALOG_LONG_DESCRIPTION="Host your own signed LibrePortal app catalog — browse and add apps from your own instance."
CFG_LIBREPORTAL_CATALOG_URL="https://git.libreportal.org/LibrePortal/LibrePortal"
CFG_LIBREPORTAL_CATALOG_URL=""
CFG_LIBREPORTAL_CATALOG_ACTIONS="configure|install|restart|shutdown|uninstall"
#
# =============================================================================
containers/libreportal_catalog/resources/site/index.html
+4 -3
View File
@@ -275,8 +275,9 @@
'use strict';
var CHANNELS = ['stable', 'edge'];
// The catalog repository submissions are opened against. Operators running
// their own catalog set this to their repo (a <meta name="lp-repo"> wins).
var REPO_URL = (document.querySelector('meta[name="lp-repo"]') || {}).content || 'https://git.libreportal.org/LibrePortal/LibrePortal';
// their own catalog set this via <meta name="lp-repo">; with none set the
// "Open the catalog repo" button is hidden rather than pointing nowhere.
var REPO_URL = (document.querySelector('meta[name="lp-repo"]') || {}).content || '';
// The hash is either a view (#view=submit) or an app focus (#<slug>).
function parseHash() {
@@ -395,7 +396,7 @@
'<li>A maintainer reviews it (especially any <code>tools/*.sh</code> host scripts) for safety and quality.</li>' +
'<li>Once approved it’s signed with the catalog key and published. It appears here — and in every box that scans this catalog — with a <strong>community</strong> badge and your name as the publisher.</li>' +
'</ol></div>' +
'<div class="doc-card"><h2>Why a PR and not an upload?</h2><p>App definitions can ship host-side scripts that run near-root on people’s boxes. A reviewed, signed pull request keeps that trustworthy without accounts, moderation queues, or a server that could be coerced — the same reason boxes verify signatures instead of trusting this site.</p><a class="doc-cta" href="' + esc(REPO_URL) + '" target="_blank" rel="noopener noreferrer">Open the catalog repo ↗</a></div>' +
'<div class="doc-card"><h2>Why a PR and not an upload?</h2><p>App definitions can ship host-side scripts that run near-root on people’s boxes. A reviewed, signed pull request keeps that trustworthy without accounts, moderation queues, or a server that could be coerced — the same reason boxes verify signatures instead of trusting this site.</p>' + (REPO_URL ? '<a class="doc-cta" href="' + esc(REPO_URL) + '" target="_blank" rel="noopener noreferrer">Open the catalog repo ↗</a>' : '') + '</div>' +
'<div class="doc-card"><h2>Status</h2><p>Community submissions are opening progressively — first-party apps are curated for now. Open submissions appear under <strong>Submissions</strong>.</p></div>' +
'</div>';
}