I want to make it read-only for visitors, but be able to edit settings and trigger builds myself. How can I do it? If I set DRONE_OPEN to false then only registered users (only me) can see builds. DRONE_OPEN=true allows everyone to create new projects, and I don’t want this.
If I set DRONE_OPEN to false then only registered users (only me) can see builds
This is not how DRONE_OPEN works. The DRONE_OPEN variable only impacts the ability for individuals to create their own accounts. It does not impact the visibility of public repositories.
For example, if your have DRONE_OPEN=false but your repository is public, anyone will be able to see your repository and build history.
You can see an example of my personal / test instance, which has DRONE_OPEN=false, but still allows you to see build history of public repositories: http://ci.gogs.drone.io/bradrydzewski/redigo
It does not impact the visibility of public repositories.
This is confusing. So visitors can’t see a list of repositories and can’t log in (despite seeing login link), but if they know repository path, they can see builds.