image

just-use-git image

A single Alpine-based image that runs a complete self-hosted git server: SSH push/pull with on-demand create, update, and destroy commands, and read-only browsing/clone over HTTPS via cgit and Caddy. It's designed to be used with no rebuild — every host-specific value is an environment variable — and no dependency on jugctl at all; a stranger can copy a quadlet snippet (or a plain podman run), set the variables below, and have a working git server.

One image, three roles, one container (and one process) per role, all sharing a pod so the roles can reach each other over 127.0.0.1:

Run a role by passing it as the container's command, e.g.:

podman run -d --name just-use-git-sshd \
  -e GIT_CLONE_HOST=git.example.com \
  -e AUTHORIZED_KEYS_B64="$(base64 -w0 authorized_keys)" \
  -p 22:22 \
  -v repos:/srv/git -v ssh-keys:/srv/ssh \
  docker.io/dickdavis/just-use-git:latest sshd

Environment variables

Volumes

Notes

• create, update, and destroy are baked into the image at /usr/local/lib/just-use-git/git-shell-commands/{create,update,destroy} and symlinked into $GIT_REPOS_ROOT/git-shell-commands on every sshd start, so an upgraded image always wins over whatever was there before.
• Push over HTTP is never possible: the git vhost only routes git-upload-pack, info/refs, HEAD, and objects/* to git-http-backend; git-receive-pack is not routed.
• Caddy speaks HTTP/1.1 only. HTTP/2 and HTTP/3 break streamed git-http-backend responses (RST_STREAM / curl 92). Clients do not need http.version=HTTP/1.1; the listener does not offer anything else. The web UI is on the same :443 listener, so it is HTTP/1.1 as well.
• The image installs git-daemon alongside git — that package is what actually ships git-http-backend on Alpine, despite the name.