{{define "settings.html"}}{{template "top" .}}
A public repo is readable by anyone with no token (clone, fetch, browse). Writes always require access.
The branch HEAD points at, and the one the force-push guard protects (a non-fast-forward here needs admin).