Slath is a secure, lightweight, self-hosted code forge where Git and Jujutsu users collaborate on equal terms.
Early development. 0.2 is an alpha for small teams: code hosting plus issues, notifications, and single sign-on. Before 1.0, minor releases may change configuration, storage, and interfaces; read the changelog before upgrading.
A small installation needs only Slath, PostgreSQL, Git, and OpenSSH.
Website and documentation: https://slath.org
- Accounts: local users with passwords, passkeys, two-factor authentication, sessions, sudo mode, SSH keys, scoped personal access tokens, and avatars. Sign-in with OpenID Connect providers, registration by invitation or open sign-up, and password reset by email.
- Organizations and repositories: owners, members, teams, collaborators with read/write/maintain/admin roles, public, internal, and private repositories, branch protection, renames with redirects, archiving, a trash for deleted repositories, and import from another Git server.
- Issues: a Markdown editor with rich-text and source modes, labels, milestones, assignees, references, file attachments, and search.
- Notifications: an inbox and email for the issues you take part in, are mentioned in, or watch.
- Git and Jujutsu: clone and push over HTTPS and SSH (protocol v0 and v2), with a push policy enforced in managed hooks. jj and plain Git clients are tested against every release.
- Code browser: files, READMEs, highlighted code, blame, history, commits with diffs, branches, tags, raw files, and archive downloads.
- API: a REST API under
/api/v1with an OpenAPI document. - Operations: an audit log, backup and restore, one-command upgrades from any earlier release, encrypted secrets with key rotation, repository maintenance, Prometheus metrics, a container image, and Docker Compose and systemd setups.
- Web UI: built for WCAG 2.2 AA and checked with axe, with light and dark themes; it works with mouse, touch, and keyboard and loads nothing from other sites.
Not yet: merge requests, forks, CI, and webhooks. See the roadmap for what comes next.
Follow docs/admin/install.md for Docker Compose or systemd, docs/admin/backup.md for backups, and docs/admin/upgrading.md to upgrade from 0.1. See CHANGELOG.md for everything in this release.
See docs/dev/setup.md. In short:
just setup && just dev-db && just tools && just checkContributions are welcome. Read CONTRIBUTING.md first; all commits need a DCO sign-off. Everyone taking part follows the Code of Conduct, and GOVERNANCE.md describes how decisions are made. Report security vulnerabilities privately as described in SECURITY.md.
Copyright © 2026 Erich Seifert. The server is licensed under the GNU Affero General Public License v3.0 or later. See LICENSES/ for the licenses of other parts. Hosting repositories on Slath doesn't affect their licenses.