CRUX

The .git repositories can only be cloned via ssh or git, the latter is not protected, and the committs are not signed, so no security. Since now CRUX uses Let's Encrypt, why not offer secure access to the git repos also?

For my own website where i use lighttpd it is as easy as

$HTTP["url"] =~ "^/scm" {
server.max-keep-alive-requests = 1
alias.url = ("/scm" => "/usr/libexec/git-core/git-http-backend")
cgi.assign = ("" => "")
setenv.add-environment = (
"GIT_PROJECT_ROOT" => "/var/git",
"GIT_HTTP_EXPORT_ALL" => ""
)
}