~zethra/stargazer

A fast and easy to use Gemini server.

eb1432a Fix system service

~zethra pushed to ~zethra/stargazer git

a month ago

27bd741 CI vendor script should use correct version

~zethra pushed to ~zethra/stargazer git

a month ago

#Stargazer

Stargazer is a fast and easy to use Gemini server with no runtime dependencies (if compiled with musl libc).

Project Status: I have begun working on Stargazer 2.0! This version will hopefully contain several new and cool features as well as breaking changes (hence 2.0). This is very much a work in progress. No promises on timeline. Feel free to take a look-see over at the next branch to see what I'm working on, and THINGS_TO_CHANGE for ideas I've written down for new features. No promises on any of them, these are just things I've thought of and might do. Feel back, suggestions, and patches welcome! If you have big ideas now is the time to voice them.

#Features

  • Static file serving
  • Automatic cert generation
  • CGI
    • Mostly Jetforce compatible
  • SCGI
  • Multiple domains and routes
    • Regex rewrites
  • Development mode

#Installation

There are various installation methods, take your pick.

#Install From Your Package Manager

Stargazer is currently packaged on a few distros including:

  • NixOS
  • Alpine
  • Arch (AUR)

It's either called stargazer or stargazer-gmi depending on the distro.

#Container

docker pull zethra/stargazer Docker Hub

docker pull codeberg.org/sashanoraa/stargazer:latest Codeberg

#Download Pre-built

You can download pre-built Linux binaries from the release page. The bundle contains a static binary, example config, and man pages. It should work on any distro.

#From crates.io

cargo install stargazer

#Build from Source

Dependencies:

  • A POSIX or other compatible system
  • Rust compiler 1.77 or later and cargo
  • scdoc (optional) to generate man pages
  • strip (optional) (from binutils) to reduce the binary size
  • Python 3 (testing)
  • Python 3 cryptography (testing)
git clone https://git.sr.ht/~zethra/stargazer && cg stargazer
./scripts/build
# As root
./scripts/install --prefix=/usr

If crates.io is inaccessible, Stargazer's dependencies for each release are also available on the release page. Simply download the vendor tar ball, extract it in the project root, and follow the instructions in the INSTRUSTIONS file.

#Minimum Supported Rust Version Policy

The required Rust version will not change between patch versions.

#Supported Platforms

Stargazer officially supports Linux and FreeBSD. It will likely work on other BSDs, macOS, Windows, and other platforms that its dependencies support, but it's not currently tested on those platforms. Other free platforms may be officially supported in the future if there are sufficient requests for them. Patches to support other platforms likely will be accepted though.

#Usage

Configure stargazer by editing its config file, normally found at /etc/stargazer.ini. See stargazer(1) for CLI options and stargazer.ini(5) for configuration instructions.

#Security

Stargazer should be reasonably secure. I used it myself, and I've tested it quite a bit. However, Stargazer has been almost exclusively written by one person and hasn't gone through any formal code review or audit so keep that in mind.

Do be mindful if you use CGI scripts. It can be easy to write them incorrectly such that they cause security problems. Especially if they are written in POSIX shell.

#Supported versions

These are the versions I'm still actively patching. If you're using an older version please update.

  • 1.3.*
  • 1.2.*
  • 1.1.*

#Know security issues

#FIXED Potential DOS if close_notify alert is received during a handshake - pre 1.1.1

Stargazer's dependency rustls had a vulnerability that could potentially affect Stargazer. See RUSTSEC-2024-0336 for more details.

#FIXED Potential DOS from pathological client cert - pre 1.1.0

Stargazer's dependency webpki had a vulnerability that could potentially affect Stargazer. See RUSTSEC-2023-0052 for more details.

#FIXED Root escape - pre 0.4.0

Stargazer would serve files from anywhere on the file system if a path starting with // was requested.

#Copying

All the source code and resulting binaries of stargazer is licensed under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE Version 3.

#Contributing

Please send any and all patches, bugs, and questions to my mailing list ~zethra/public-inbox@lists.sr.ht with the prefix stargazer or submit a ticket to the bug tracker if you feel so inclined todo.sr.ht/~zethra/stargazer. You can also contact me directly. Up-to-date contact info can be found on my website sashanoraa.gay.

#Help Wanted with Packaging

If you can package stargazer please do! I currently maintain an Arch and NixOS packages but if you can package for any other distro please do and let me know. I don't currently use Arch, so if you want to take over maintenance of the AUR package please reach out.