[18:46:20]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot pushed 1 commit to add-to-wishlist-tabula: Add Tabula to wishlist ([b50ff5e5](https://github.com/YunoHost/apps/commit/b50ff5e592da1b4f0e6e7c214983c54442453369))
[18:46:31]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot created new branch add-to-wishlist-tabula
[18:47:03]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot opened [pull request #1983](https://github.com/YunoHost/apps/pull/1983): Add Tabula to wishlist
[18:52:34]
<Aleks (he/him/il/lui)> love it
[18:52:36]
<Aleks (he/him/il/lui)> "single executable" that requires java installed
[18:55:26]
<Yunohost Git/Infra notifications> App owntracks rises from level 6 to 8 in job [#22597](https://ci-apps.yunohost.org/ci/job/22597) !
[18:55:31]
<orhtej2> not sure about packaging unmaintained app TBH
[18:55:32]
<orhtej2> > <@Alekswag:matrix.org> "single executable" that requires java installed
technically the truth :P
[19:01:56]
<Aleks (he/him/il/lui)> thank god i was having trouble to find a legit reason to close this
[19:01:56]
<Aleks (he/him/il/lui)> 4 years ago
[19:01:56]
<Aleks (he/him/il/lui)> it's unmaintained ?
[19:04:19]
<Yunohost Git/Infra notifications> [apps] @alexAubin closed [pull request #1983](https://github.com/YunoHost/apps/pull/1983): Add Tabula to wishlist
[19:04:19]
<orhtej2> otoh downloading [Temurin](https://github.com/adoptium/temurin21-binaries/releases/tag/jdk-21.0.2%2B13) and running `java -jar whatever` is not precisely rocket science
[19:04:19]
<Yunohost Git/Infra notifications> [apps] @alexAubin deleted branch add-to-wishlist-tabula
[19:04:19]
<orhtej2> (in terms of packaging)
[19:04:19]
<Yunohost Git/Infra notifications> [apps] @alexAubin [commented](https://github.com/YunoHost/apps/pull/1983#issuecomment-1913296542) on [issue #1983](https://github.com/YunoHost/apps/pull/1983) Add Tabula to wishlist: ... Last release in 2018 https://github.com/tabulapdf/tabula/graphs/contributors Nope
[19:04:19]
<Aleks (he/him/il/lui)> what's Temurin 😬
[19:04:45]
<orhtej2> Eclipse build of OpenJDK
[19:04:45]
<orhtej2> you know, legal stuff
[19:05:17]
<orhtej2> with weird java licensing and stuff, it's what was previously known as AdoptOpenJDK
[19:05:17]
<Aleks (he/him/il/lui)> sooo, it's an IDE ?
[19:06:29]
<orhtej2> no, Eclipse is a foundation, just like Apache, maintaining an umbrella of OSS projects
[19:06:30]
<orhtej2> Eclipse IDE being one of them OFC
[19:06:30]
<Aleks (he/him/il/lui)> hmmokay?
[19:09:40]
<Aleks (he/him/il/lui)> i never understood the whole thing about "openjdk" and "openjre" and whatever
[19:09:40]
<orhtej2> > <@Alekswag:matrix.org> so it's "another version of Java" ?
it's very likely binary distribution built of official OpenJDK sources
[19:09:40]
<Aleks (he/him/il/lui)> so it's "another version of Java" ?
[19:09:45]
<orhtej2> yes and no, the language is compiled to intermediate language and VM provides platform-specific bindings for IO etc
[19:09:45]
<orhtej2> so compile on Windows and get program that's runnable on Windows, Linux and whereever
[19:09:45]
<orhtej2> JDK is compiler, JRE is vm for running stuff, OpenJDK is open source part (Oracle has premium features that are not open source I guess?)
[19:09:45]
<orhtej2> no, Java is a compiled language, JDK comes with `javac` aka Java Compiler
[19:09:45]
<Aleks (he/him/il/lui)> hmmmok so JDK is like GCC/G++ and JRE is like libc ? x\_X
[19:09:45]
<orhtej2> JRE provides `java` aka 'run this java compiled bytecode on target machine VM'
[19:09:45]
<orhtej2> this VM allows (theoretically) compile once, run on any compatible platform
[19:09:45]
<Aleks (he/him/il/lui)> like why "java development kit", why "development kit", is "python" a development kit ? x_x
[19:22:39]
<Yunohost Git/Infra notifications> [apps] @w-b-k [commented](https://github.com/YunoHost/apps/pull/1983#issuecomment-1913301747) on [issue #1983](https://github.com/YunoHost/apps/pull/1983) Add Tabula to wishlist: Clear enough
[19:25:41]
<Yunohost Git/Infra notifications> [nextcloud_ynh] @waikaeth opened [issue #656](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/656): Cant connect over plain http, always tries to redirect to https (android apps require either plain http or valid cert, which I cant get)
[19:57:58]
<Yunohost Git/Infra notifications> [nextcloud_ynh] @alexAubin closed [issue #656](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/656): Cant connect over plain http, always tries to redirect to https (android apps require either plain http or valid cert, which I cant get)
[19:58:16]
<Yunohost Git/Infra notifications> [nextcloud_ynh] @alexAubin [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/656#issuecomment-1913315702) on [issue #656](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/656) Cant connect over plain http, always tries to redirect to https (android apps require either plain http or valid cert, which I cant get): cf https://github.com/YunoHost/issues/issues/2319#issuecomment-1913307869
[20:01:34]
<Yunohost Git/Infra notifications> [apps] @OniriCorpe [commented](https://github.com/YunoHost/apps/pull/1982#discussion_r1468617511) on pull request #1982 Added potential alternatives to apps: rather "Apple Pages"? since we put company names for others and Pages is little known outside of Apple users
[20:01:35]
<Yunohost Git/Infra notifications> [apps] @OniriCorpe changes_requested [pull request #1982](https://github.com/YunoHost/apps/pull/1982#pullrequestreview-1847238611) Added potential alternatives to apps
[20:01:35]
<Yunohost Git/Infra notifications> [apps] @OniriCorpe edited review [pull request #1982](https://github.com/YunoHost/apps/pull/1982#pullrequestreview-1847238611): Added potential alternatives to apps
[20:05:41]
<Émy - OniriCorpe> > <@Alekswag:matrix.org> the `[::]` ... but maybe it doesnt matter if the ports are only internal ... but the RPC port is supposed to be publicly exposed ... but it'll only work in ipv6 afaik
if the API port must be behind nginx reverse proxy, don't bind to "::" because that can bind to a public IP and expose that port publicly
[20:07:50]
<Émy - OniriCorpe> > <@Alekswag:matrix.org> "single executable" that requires java installed
isn't it a desktop app? :")
[20:09:30]
<Aleks (he/him/il/lui)> yeah it's confusing, the README says
>abula is designed with security in mind. Your PDF and the extracted data never touch the net -- when you use Tabula on your local machine, as long as your browser's URL bar says "localhost" or "127.0.0.1", all processing takes place on your local machine.
[20:09:43]
<Aleks (he/him/il/lui)> but anyway, last release 2018 so yeah
[20:19:25]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot created new branch add-to-wishlist-read-the-docs
[20:21:10]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot pushed 1 commit to add-to-wishlist-read-the-docs: Add Read the Docs to wishlist ([fbd9b7ba](https://github.com/YunoHost/apps/commit/fbd9b7bac75646fd83034169b0a0299b8467fc8d))
[20:21:11]
<Yunohost Git/Infra notifications> [apps] @yunohost-bot opened [pull request #1984](https://github.com/YunoHost/apps/pull/1984): Add Read the Docs to wishlist
[21:23:48]
<orhtej2> (asking for opinions)
[21:23:48]
<orhtej2> what is this shit, how many random services do you need x_x https://github.com/TeamPiped/Piped-Docker/tree/main/template
[21:23:49]
<orhtej2> packaging this should be AIO as in UI, backend and proxy packaged as one package?
[21:23:58]
<Aleks (he/him/il/lui)> https://i.imgflip.com/8dt72d.jpg
[21:24:28]
<Aleks (he/him/il/lui)> they have both caddy and nginx ? wut
[21:24:34]
<orhtej2> they let you choose in that AIO installer
[21:24:47]
<Aleks (he/him/il/lui)> @_@
[21:24:52]
<orhtej2> basically it's static website built with vite, backend in Java and proxy in Rust
[21:24:59]
<orhtej2> gotta catch them all!
[21:25:20]
<Aleks (he/him/il/lui)> what's the "proxy" part ?
[21:25:32]
<Aleks (he/him/il/lui)> like some caching stuff ?
[21:25:36]
<orhtej2> no fucking clue TBH
[21:26:01]
<orhtej2> I'd say it's pretty barebone
[21:26:01]
<orhtej2> https://github.com/TeamPiped/piped-proxy/blob/main/src/main.rs
[21:26:40]
<Aleks (he/him/il/lui)> ah or proxy as in "it's a proxy between you and youtube"
[21:27:29]
<Aleks (he/him/il/lui)> anyway idk, naively i would remove all the stuff specific to their AIO deployment, keep only the useful nginx config bits and "voila"
[21:28:05]
<orhtej2> yeah, probably
[21:29:00]
<orhtej2> btw if user X runs an app that listens on 12345 is other app run by said user able to connect to localhost:12345 ?
[21:29:43]
<Aleks (he/him/il/lui)> you mean another system user running on the machine ? i guess yes ?
[21:29:43]
<orhtej2> without exposing via nginx that is, this proxy does not seem like it should be reachable from outside
[21:30:02]
<Aleks (he/him/il/lui)> network is not "containerized" between apps / services if that's what you're asking
[21:30:08]
<Aleks (he/him/il/lui)> hmm
[21:30:42]
<Aleks (he/him/il/lui)> it means you can contact it *from* 127.0.0.1
[21:30:42]
<Aleks (he/him/il/lui)> well listening on 127.0.0.1:12345 doesn't mean the app is publicly exposed
[21:30:43]
<orhtej2> yeah, that sounds like a plan
[21:30:50]
<Aleks (he/him/il/lui)> that's the difference between binding to 127.0.0.1:<port> and 0.0.0.0:<port>
[21:49:36]
<Yunohost Git/Infra notifications> [nextcloud_ynh] @OniriCorpe labeled bug on [issue #503](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/503): .well-known broken after update
[22:01:22]
<orhtej2> is there magic option to uncover whole log on webadmin?
[22:01:22]
<orhtej2> other than clicking ➕
[22:09:13]
<Aleks (he/him/il/lui)> Dont think so, there's an issue about this in the issue tracker mess iirc
[22:24:11]
<orhtej2> I'm missing something obvious here for sure:
```sh
$ sudo -u piped JAVA_HOME="/var/www/piped/jdk" PATH="/var/www/piped/jdk/bin:$PATH" echo $PATH
/var/www/piped/.cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
```
[22:24:11]
<orhtej2> dafuq
[22:28:53]
<Aleks (he/him/il/lui)> hmmm
[22:28:54]
<Aleks (he/him/il/lui)> cf `--preserve-env` in sudo's manpage
[22:28:54]
<Aleks (he/him/il/lui)> and/or the `env` command
[22:29:43]
<Aleks (he/him/il/lui)> or for example https://github.com/YunoHost-Apps/civicrm_drupal7_ynh/blob/master/scripts/upgrade#L147
[22:34:28]
<orhtej2> ohhh there's yet another proxy in Go involved
[22:34:35]
<orhtej2> ☠️
[22:36:45]
<Émy - OniriCorpe> another weird arcane from app devs
[22:40:47]
<Aleks (he/him/il/lui)> thanksfully we won't need these kind of tricks when app scripts won't run as root anymore 😬
[22:48:55]
<lapineige> > <@oniricorpe:im.emelyne.eu> if the API port must be behind nginx reverse proxy, don't bind to "::" because that can bind to a public IP and expose that port publicly
I don't get it, sorry 😅
[22:54:51]
<Émy - OniriCorpe> if you're using "::", the app can bind to public IPv6
[22:55:21]
<Émy - OniriCorpe> so using that public IPv6 and the port, you have direct access to the app, bypassing the reverse proxy
[22:56:15]
<Émy - OniriCorpe> also, can someone extract the log for me? https://ci-apps-dev.yunohost.org/ci/job/12966
[22:56:15]
<lapineige> I'll try that, because it didn't work from an external client
[22:56:25]
<lapineige> Also does this apply if the port is closed ?
[22:56:46]
<Émy - OniriCorpe> i think so
[22:57:15]
<Émy - OniriCorpe> anyway it's bad practice to use 0.0.0.0 or :: without a real usage
[22:59:38]
<Aleks (he/him/il/lui)> 127.0.0.1 sounds like the simplest solution if this is just for internal reverse proxy
[22:59:39]
<Émy - OniriCorpe> cf https://github.com/YunoHost/package_linter/pull/125
[22:59:39]
<lapineige> So it should be localhost ?
[22:59:39]
<Émy - OniriCorpe> if it's needed, okay, else, don't
[22:59:39]
<Émy - OniriCorpe> > So it should be localhost ?
yes, or 127.0.0.1
[23:00:48]
<Émy - OniriCorpe> if i remember well, `localhost` must be avoided because of some weird bugs with nginx
[23:02:55]
<Yunohost Git/Infra notifications> [package_linter] @OniriCorpe [commented](https://github.com/YunoHost/package_linter/pull/125#issuecomment-1897229845) on [issue #125](https://github.com/YunoHost/package_linter/pull/125) add bind_public_ip check: edit: this comment is not relevant anymore I dont know how to discriminate just :: from ::1 or fd1d:f00d:1312::aa...
[23:03:05]
<Yunohost Git/Infra notifications> [package_linter] @OniriCorpe [commented](https://github.com/YunoHost/package_linter/pull/125#issuecomment-1897229845) on [issue #125](https://github.com/YunoHost/package_linter/pull/125) add bind_public_ip check: edit: this comment is not relevant anymore I dont know how to discriminate just :: from ::1 or fd1d:f00d:1312::aa...