Sunday, February 11, 2024
apps@conference.yunohost.org
February
Mon Tue Wed Thu Fri Sat Sun
      1
2 3 4
5 6 7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
     
             

[01:07:39] <Yunohost Git/Infra notifications> App redmine failed all tests in job [#23255](https://ci-apps.yunohost.org/ci/job/23255) :(
[05:22:42] <Yunohost Git/Infra notifications> App django-fritzconnection goes down from level 8 to 6 in job [#23265](https://ci-apps.yunohost.org/ci/job/23265)
[06:50:35] <Yunohost Git/Infra notifications> [apps] @tituspijean deleted branch add-to-wishlist-osclass
[06:50:36] <Yunohost Git/Infra notifications> Job [#23250](https://ci-apps.yunohost.org/ci/job/23250) for mongo-express failed miserably :(
[08:54:26] <Yunohost Git/Infra notifications> App bicbucstriim failed all tests in job [#23280](https://ci-apps.yunohost.org/ci/job/23280) :(
[08:59:08] <Yunohost Git/Infra notifications> App sonarr goes down from level 8 to 6 in job [#23278](https://ci-apps.yunohost.org/ci/job/23278)
[09:56:43] <Yunohost Git/Infra notifications> App mautrix_signal failed all tests in job [#23285](https://ci-apps.yunohost.org/ci/job/23285) :(
[11:05:22] <Yunohost Git/Infra notifications> [apps] @fflorent opened [pull request #2008](https://github.com/YunoHost/apps/pull/2008): Add mautrix_discord to catalog
[11:09:36] <Yunohost Git/Infra notifications> App restic goes down from level 8 to 6 in job [#23289](https://ci-apps.yunohost.org/ci/job/23289)
[13:43:49] <Yunohost Git/Infra notifications> App armadietto goes down from level 8 to 7 in job [#23298](https://ci-apps.yunohost.org/ci/job/23298)
[13:44:06] <Yunohost Git/Infra notifications> [apps] @ericgaspar approved [pull request #2008](https://github.com/YunoHost/apps/pull/2008#pullrequestreview-1874372084) Add mautrix_discord to catalog
[13:44:10] <Yunohost Git/Infra notifications> [apps] @ericgaspar merged [pull request #2008](https://github.com/YunoHost/apps/pull/2008): Add mautrix_discord to catalog
[13:44:11] <Yunohost Git/Infra notifications> [apps] @ericgaspar pushed 2 commits to master ([b75e3f84a431...0b892bf0bd42](https://github.com/YunoHost/apps/compare/b75e3f84a431...0b892bf0bd42))
[13:44:18] <Yunohost Git/Infra notifications> [apps/master] Add mautrix_discord to catalog - Florent
[14:26:18] <Yunohost Git/Infra notifications> App fab-manager failed all tests in job [#23301](https://ci-apps.yunohost.org/ci/job/23301) :(
[16:05:14] <Yunohost Git/Infra notifications> [apps] @yunohost-bot pushed 1 commit to add-to-wishlist-script-server: Add script-server to wishlist ([f17be33c](https://github.com/YunoHost/apps/commit/f17be33ce0be9cf5ca684ce5046522b1bb12e8f8))
[16:16:41] <Yunohost Git/Infra notifications> App xwiki goes down from level 7 to 3 in job [#23304](https://ci-apps.yunohost.org/ci/job/23304)
[17:31:38] <orhtej2> anyone has any insight?

I have the following rule in nginx.conf:

```
location /internal/gfonts/css {
resolver 1.1.1.1 ipv6=off valid=30s;
set $empty '';
proxy_pass https://fonts.googleapis.com/css?$args$empty;
proxy_hide_header Access-Control-Allow-Origin;
proxy_hide_header Cross-Origin-Resource-Policy;
proxy_hide_header Link;
proxy_hide_header Alt-Svc;
proxy_hide_header Cache-Control;
proxy_hide_header Expires;

proxy_ignore_headers Set-Cookie Vary Cache-Control Expires;

proxy_set_header User-Agent "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36";
proxy_set_header Host "fonts.googleapis.com";
proxy_set_header Accept "*/*";

more_set_headers "Access-Control-Allow-Origin: $http_origin";
more_set_headers "Cache-Control: max-age=86400 -s '200 201 206 301 302 303 307 308'";
more_set_headers "X-Cache-Status: $upstream_cache_status";
}
```

Yet requests will end in error inspector-side and domain-error.log will show:

```
2024/02/11 18:19:18 [error] 1267655#1267655: *89758 connect() to [2a00:1450:401b:80e::2003]:443 failed (101: Network is unreachable) while connecting to upstream, client: ip.v.4.address, server: my.domain.tld, request: "GET /internal/gfonts/font/dmsans/v14/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRR232VGM.woff2 HTTP/2.0", upstream: "https://[2a00:1450:401b:80e::2003]:443/s/dmsans/v14/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRR232VGM.woff2", host: "my.domain.tld"
```

So basically request originates from `ip.v.4.address` and tries to reach CDN's IPv6
[17:46:41] <Aleks (he/him/il/lui)> uh wokay that seems super mysterious but naively I'd try to force it by adding the fonts.googleaps.com's IPv4 in /etc/hosts just to make sure it'd work in ipv4 ?
[17:46:49] <Aleks (he/him/il/lui)> (assuming nginx does read /etc/hosts)
[17:47:29] <Aleks (he/him/il/lui)> or maybe using the IPv4 in the `proxy_pass` instruction considering that you set the Host header explicitly later anyway
[18:30:00] <orhtej2> > <@Alekswag:matrix.org> uh wokay that seems super mysterious but naively I'd try to force it by adding the fonts.googleaps.com's IPv4 in /etc/hosts just to make sure it'd work in ipv4 ?

Turned out I needed to add`resolver` in another place
[18:30:04] <orhtej2> Despite nginx claiming returning 200
[18:30:04] <orhtej2> Still in getting wtf blocked responses
[19:05:01] <orhtej2> > Still in getting wtf blocked responses

as it turns out http.cat/499 is a miscommunication between (I assume) FF sending HEAD request to see if the file was changed and NGINX trying to proxy_pass full response as Penpot is fucking garbage
[19:05:17] <orhtej2> I can live with that
[20:14:27] <Yunohost Git/Infra notifications> App xwiki goes down from level 7 to 3 in job [#23304](https://ci-apps.yunohost.org/ci/job/23304)
[20:40:47] <eric_G> > I can live with that

misread that with "I can live with cat"
[21:11:08] <orhtej2> > <@ericg:matrix.org> misread that with "I can live with cat"

I probably could, why not? 🐱
[21:14:36] <Émy - OniriCorpe> for the nginx nerds: is this correct?
https://github.com/YunoHost-Apps/friendica_ynh/pull/124/files#diff-8e371ad49c2a106a2f6b14d3cb01445c4f7d5c3694f50892d95932b48f42671cR55-R59
[21:16:32] <orhtej2> > <@oniricorpe:im.emelyne.eu> for the nginx nerds: is this correct?
> https://github.com/YunoHost-Apps/friendica_ynh/pull/124/files#diff-8e371ad49c2a106a2f6b14d3cb01445c4f7d5c3694f50892d95932b48f42671cR55-R59

unlikely, the newly added routes still need to be prefixed by `__PATH__`
[21:17:00] <Émy - OniriCorpe> but the app is mandatory installed on the root of the domain name
[21:37:35] <orhtej2> > <@oniricorpe:im.emelyne.eu> but the app is mandatory installed on the root of the domain name

then LGTM but I'm not that good at it
[22:41:47] <Émy - OniriCorpe> https://aria.im/_matrix/media/v1/download/im.emelyne.eu/ytPVZjNuZKKtsroLCsUJemvS
[22:41:48] <Émy - OniriCorpe> 🙃
[22:48:43] <Émy - OniriCorpe> https://aria.im/_matrix/media/v1/download/im.emelyne.eu/flloNQUKezZhYalcayTwHeLn
[22:48:47] <Émy - OniriCorpe> https://github.com/YunoHost-Apps/adguardhome_ynh/pull/154/files#diff-f5a63a2a9b123f3b3ae6bcd018ba36e8694b2dfbf7332e3812e7a9761da4c629R44-R50
[22:56:25] <Émy - OniriCorpe> only I knew about this bug lol
[22:56:58] <Émy - OniriCorpe> anyone else would have struggled to find it :")
[23:01:16] <Yunohost Git/Infra notifications> App snserver goes down from level 7 to 6 in job [#23321](https://ci-apps.yunohost.org/ci/job/23321)
[23:52:00] <Tag> > <@oniricorpe:im.emelyne.eu> anyone else would have struggled to find it :")

very yunohost moment