otty / dotfiles

All tools/Apache Subversion

Apache Subversion

svn

Enterprise-class centralized version control for the masses.

Detected by svn, svnadmin, svnversion | macOS, Linux, Windows |subversion.apache.org

Sync it svn.toml

Sync rules

What travels, what stays, what never leaves

Synced4 paths, copied whole to your other machines

~/.subversion/config

~/.subversion/servers

%APPDATA%/Subversion/config

%APPDATA%/Subversion/servers

Never synced2 credential paths, never uploaded in any form

~/.subversion/auth/

%APPDATA%/Subversion/auth/

Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.

Secret fieldsInside a file that otherwise syncs

~/.subversion/serverslines starting with

http-proxy-passwordssl-client-cert-password

The rest of the file syncs. Only these values are lifted out and kept in your secret store.

Secret fieldsInside a file that otherwise syncs

%APPDATA%/Subversion/serverslines starting with

http-proxy-passwordssl-client-cert-password

The rest of the file syncs. Only these values are lifted out and kept in your secret store.

Stays on this machineInside a file that otherwise syncs

~/.subversion/serverslines starting with ssl-authority-files

…

http-proxy-port = 8080

http-proxy-username = octocat

http-proxy-password = FAKE-proxy-password

ssl-authority-files = /Users/octocat/certs/corp-ca.pem;/Users/octocat/certs/corp-ca2.pemmachine-local

ssl-client-cert-file = /Users/octocat/certs/octocat.p12

ssl-client-cert-password = FAKE-client-cert-passphrase

…

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Stays on this machineInside a file that otherwise syncs

%APPDATA%/Subversion/serverslines starting with ssl-authority-files

…

http-proxy-port = 8080

http-proxy-username = octocat

http-proxy-password = FAKE-proxy-password

ssl-authority-files = C:/Users/octocat/certs/corp-ca.pem;C:/Users/octocat/certs/corp-ca2.pemmachine-local

ssl-client-cert-file = C:/Users/octocat/certs/octocat.p12

ssl-client-cert-password = FAKE-client-cert-passphrase

…

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Excluded

Nothing. Apache Subversion writes no caches or state in your home directory.

Apache Subversion in your home directory Every rule on this page, by file

· config Sync

…

http-proxy-port = 8080

http-proxy-username = octocat

http-proxy-password = FAKE-proxy-password

ssl-authority-files = /Users/octocat/certs/corp-ca.pem;/Users/octocat/certs/corp-ca2.pemmachine-local

ssl-client-cert-file = /Users/octocat/certs/octocat.p12

ssl-client-cert-password = FAKE-client-cert-passphrase

…

Each machine keeps its own copy of these.

http-proxy-passwordssl-client-cert-password

Lifted into your secret store; the rest of the file syncs.

· auth/ Never synced

· config Sync

…

http-proxy-port = 8080

http-proxy-username = octocat

http-proxy-password = FAKE-proxy-password

ssl-authority-files = C:/Users/octocat/certs/corp-ca.pem;C:/Users/octocat/certs/corp-ca2.pemmachine-local

ssl-client-cert-file = C:/Users/octocat/certs/octocat.p12

ssl-client-cert-password = FAKE-client-cert-passphrase

…

Each machine keeps its own copy of these.

http-proxy-passwordssl-client-cert-password

Lifted into your secret store; the rest of the file syncs.

· auth/ Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/svn.tomlThe file this page is generated from

id = "svn"

name = "Apache Subversion"

homepage = "https://subversion.apache.org"

description = "Enterprise-class centralized version control for the masses."

icon = "SimpleIcons:subversion"

detect = ["svn", "svnadmin", "svnversion"]

# https://svnbook.red-bean.com/en/1.7/svn.advanced.confarea.html — "On

# Unix-like systems, this area appears as a directory named .subversion in the

# user's home directory"; "On Win32 systems, Subversion creates a folder named

# Subversion, typically inside the Application Data area of the user's profile

# directory", reachable as %APPDATA%\Subversion. The area holds config,

# servers and the auth/ cache.

paths = [

"~/.subversion/config",

"~/.subversion/servers",

"%APPDATA%/Subversion/config",

"%APPDATA%/Subversion/servers",

]

exclude = []

# auth/ is the credential cache the same page calls "Client Credentials":

# svn.simple holds usernames and passwords, svn.ssl.client-passphrase the

# client-certificate passphrases, svn.username the bare usernames. Every file

# under it is a stored credential, so the directory goes in whole. Both

# platform spellings, or the cache syncs in the clear from Windows.

secret = [

"~/.subversion/auth/",

"%APPDATA%/Subversion/auth/",

]

# The `servers` file carries two passwords in the clear. Names taken from

# Subversion's own template for the file, subversion/libsvn_subr/config_file.c:

# "http-proxy-password Password for auth to proxy service" and

# "ssl-client-cert-password Client Key password, if needed." Both spellings

# of the file, or the passwords are lifted out on Unix and sync in the clear

# from a Windows machine.

[[secret_paths]]

file = ["~/.subversion/servers", "%APPDATA%/Subversion/servers"]

match = { prefix = ["http-proxy-password", "ssl-client-cert-password"] }

# From the same template: "ssl-authority-files List of files, each of a

# trusted CA" — a semicolon-delimited list of absolute paths to PEM files

# sitting on this machine's disk, which say nothing on any other.

# The list is one the user assembled for this host, so it is worth keeping to

# rebuild it and worth nothing on a box that does not carry those PEMs.

[[machine_lines]]

file = ["~/.subversion/servers", "%APPDATA%/Subversion/servers"]

match = { prefix = ["ssl-authority-files"] }

scope = "backup"

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/svn. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out. None of them splits ssl-authority-files and ssl-authority-files for you — that part is Otty’s own sync, or a template you write by hand.