🛡️ Security

Service Account

A non-human operating system or application account under which a service runs. Its permissions define the blast radius of any exploit against that service, since attacker code executes with the service account's access to files, secrets, and the network.

📚 Deep Dive

Learn Article

Hardening a Self-Hosted Git Server: Registration, Isolation, and Secrets

A practical hardening pass for Gitea and similar self-hosted forges: close registration, shrink the service account's reach, isolate the container, and limit what a compromise can steal.

intermediate 5 min read

Back to Glossary