https://homelab.nbkelley.com/docs/administration/ Recent content in Administration on homelab Hugo en Fri, 01 May 2026 00:00:00 +0000 https://homelab.nbkelley.com/docs/administration/git-push-authentication/ Fri, 01 May 2026 00:00:00 +0000 https://homelab.nbkelley.com/docs/administration/git-push-authentication/ <h1 id="git-push-authentication">Git Push Authentication<a class="anchor" href="#git-push-authentication">#</a></h1> <h2 id="what-was-established">What Was Established<a class="anchor" href="#what-was-established">#</a></h2> <ul> <li>GitHub deprecated password authentication for Git over HTTPS. Even if passwords worked previously, they are now rejected with <code>password not supported</code>.</li> <li>Personal Access Tokens (PAT) or SSH keys are required for authentication.</li> <li>403 Permission Denied errors typically indicate stale cached credentials or insufficient token scopes.</li> </ul> <h2 id="key-decisions">Key Decisions<a class="anchor" href="#key-decisions">#</a></h2> <ul> <li>Use Personal Access Tokens (PAT) for HTTPS Git operations.</li> <li>Classic tokens require the <code>repo</code> scope for private repositories.</li> <li>Fine-grained tokens require <code>Contents</code> (Read and write) and <code>Metadata</code> (Read) permissions, explicitly scoped to the target repository.</li> </ul> <h2 id="current-configuration">Current Configuration<a class="anchor" href="#current-configuration">#</a></h2> <ul> <li><strong>GitHub Username</strong>: <code>NK-Iluvatar</code></li> <li><strong>Target Repository</strong>: <code>MBTADashboard</code></li> <li><strong>Remote URL</strong>: <code>https://github.com/NK-Iluvatar/MBTADashboard.git</code></li> </ul> <h2 id="historical-notes">Historical Notes<a class="anchor" href="#historical-notes">#</a></h2> <ul> <li><strong>Password Deprecation</strong>: GitHub enforced its 2021 policy change retroactively, blocking account passwords for Git operations over HTTPS.</li> <li><strong>403 Troubleshooting</strong>: Resolved by clearing cached credentials (<code>git credential reject</code> or OS credential manager) and verifying token scopes (<code>repo</code> for classic, <code>Contents</code> for fine-grained).</li> <li><strong>Token Testing</strong>: Verified token validity using <code>curl -H &quot;Authorization: token TOKEN&quot; https://api.github.com/user</code>.</li> </ul> <h2 id="open-questions">Open Questions<a class="anchor" href="#open-questions">#</a></h2> <ul> <li>None.</li> </ul> <h2 id="related-pages">Related Pages<a class="anchor" href="#related-pages">#</a></h2> <ul> <li>Git Pull Strategies</li> <li><a href="https://homelab.nbkelley.com/docs/services/homelab-dashboard/">Homelab Dashboard</a></li> </ul> <h2 id="sources">Sources<a class="anchor" href="#sources">#</a></h2> <ul> <li>DeepSeek conversation (2026-02-18) regarding <code>MBTADashboard</code> push failures and PAT configuration.</li> </ul>