Wednesday, November 29, 2023
support@conference.yunohost.org
November
Mon Tue Wed Thu Fri Sat Sun
    1
2
3
4
5
6
7
8
9
10 11
12
13
14
15
16
17 18
19
20
21
22
23
24
25
26
27
28
29
30
     
             

[02:34:22] <zewm> Hello :)
[02:34:25] <zewm> I'm trying to update Discourse but having a hard time. Is there a way I can update it manually?
[02:34:25] <zewm> I tried the testing branch but it is 2 version behind master
[02:51:56] <Aleks (he/him/il/lui)> just ... explain why you are having a "hard time" ...
[02:52:21] <zewm> When I try to update through yunohost, it says it's already up to date (but it's not). Then I followed an instruction on github to install testing branch, but this one is also behind.
[02:52:27] <zewm> The Discourse app *
[03:51:53] <beedee> > <@charlesp:stratus.family> migrating the database should be enough then

thanks but i can't figure out how to do it. pgadmin is really broken currently on yunohost. Is there a how to doc somewhere?
[06:58:39] <tituspijean> zewm: Hi, can you fetch your last Discourse upgrade log from your logs history in the webadmin?
[09:15:42] <ChriChriChri> > just support@conference.yunohost.org
Yes, in Dino this worked. The first try I just tapped on the link in an aosp that then opened monocles with the question whether I wanted to join. And that didn't work...
[09:23:20] <tituspijean> ChriChriChriChriChri do you plan to do single increments or a fibonacci sequence of `Chri`s? 😛
[09:50:35] <ChriChriChri> If you ask like this I'll go for fibonacci... No, I'll decide later which protocol to keep. I have to use matrix anyway, but it seemed somehow apropriate to at least try xmpp for yunohost.
[09:55:04] <ChriChriChri> https://xmpp-upload.link-goe.de/upload/LSrmMmalAC91704/Screenshot_20231129-103346_Fennec.png
[09:55:07] <ChriChriChri> BTW, this is how using the information from the documentation worked in LineageOS.
[09:55:19] <ChriChriChri> https://xmpp-upload.link-goe.de/upload/HHonYARKrPD1719/Screenshot_20231129-103402_monocles%20chat.png
[09:55:28] <ChriChriChri> https://xmpp-upload.link-goe.de/upload/HGS1eW77P8f1728/Screenshot_20231129-103503_monocles%20chat.png
[09:56:18] <ChriChriChri> I don't know, if the link doesn't work (in Android?), maybe it should be changed or deleted leaving the info to enter manually into the xmpp client...
[13:26:38] <Paprika> I've been messing with Wordpress lately on YNH. I have stumbled upon a question - can I have the admin panel served on a local domain (for instance, homelab.local), while the public side of the site would be served on a public facing domain (for instance, domain.tld)? I am not entirely sure I have yet grasped what would be the best way to do so, if at all doable.
[13:31:34] <Aleks (he/him/il/lui)> yes
[13:31:55] <Aleks (he/him/il/lui)> the admin panel is served on any domain (or IP) that corresponds to the machine
[14:40:27] <Mateusz Szymański> anyone using Dendrite here that is able to respond?
[14:40:52] <Mateusz Szymański> (my dendrite keeps giving me `*http.http2UnknownFrame` when talking to matrix.org)
[14:55:34] <Paprika> Where do I have to install the app via YNH though? Currently I have it installed on a local domain, but plan to set it up to show the site publicly, except the admin panel.
Or is it some kind of complicated multisite configuration that I have to do in order to make it work?
[15:01:30] <Aleks (he/him/il/lui)> well uh not sure i get the question ... if you want the app to be publicly accessible, you should install it to a public domain
[15:01:52] <Aleks (he/him/il/lui)> (or move the already-installed app using the "change url" thing)
[15:34:33] <Paprika> Nevermind, seems like it isn't doable. What I wanted to achieve was have the app installed on a local domain (so nobody would be able to access the admin panel), and have the webpage be published on another public domain instead, from the same instance.
[15:46:46] <Charles P.> Maybe installing your app on local domain and installing redirect_ynh on your public domain to reverse proxy to your app's webpage
[15:48:42] <Aleks (he/him/il/lui)> ugh you mean the admin panel *of this app* ~_~
[15:49:42] <Aleks (he/him/il/lui)> not sure why you'd do that, the admin panel of wordpress is already supposed to be only accessible by users who have the "wordpress (admin)" permission
[16:02:07] <Paprika> I didn't want anyone to view the admin panel login page as you could try to bruteforce it if you really wanted to, at least for wordpress. Which is why I have ynh admin panel available only in local network, as well as some other apps that I have available only locally.
Main frustration is with e-mail, because I used to use cloudflare and put some apps behind a login via cf, but using cloudflare on the main domain simply denies all incoming e-mail (and probably outgoing) due to openresolvers not being supported by spamhaus and other spam companies.
Anyways, having the app access only via local domain would solve the issue of being able to bruteforce it, but I could also simply deny access via nginx to that path I guess if need be.
[16:02:28] <Paprika> I didn't want anyone to view the admin panel login page as you could try to bruteforce it if you really wanted to, at least for wordpress. Which is why I have ynh admin panel available only in local network, as well as some other apps that I have available only locally.
Main frustration is with e-mail, because I used to use cloudflare and put some apps behind a login via cf, but using cloudflare on the main domain simply denies all incoming e-mail (and probably outgoing) due to openresolvers not being supported by spamhaus and other spam companies (which can be overcome, but the solution is silly)
Anyways, having the app access only via local domain would solve the issue of being able to bruteforce it, but I could also simply deny access via nginx to that path I guess if need be.
[16:02:33] <Paprika> I didn't want anyone to view the admin panel login page as you could try to bruteforce it if you really wanted to, at least for wordpress. Which is why I have ynh admin panel available only in local network, as well as some other apps that I have available only locally.
Main frustration is with e-mail, because I used to use cloudflare and put some apps behind a login via cf, but using cloudflare on the main domain simply denies all incoming e-mail (and probably outgoing) due to openresolvers not being supported by spamhaus and other spam companies (which can be overcome, but the solution is silly).
Anyways, having the app access only via local domain would solve the issue of being able to bruteforce it, but I could also simply deny access via nginx to that path I guess if need be.
[16:03:40] <Aleks (he/him/il/lui)> if you down that road to be consistent you should also disable other places which can be bruteforce such as the yunohost sso portal ...
[16:03:41] <Paprika> I didn't want anyone to view the admin panel login page as you could try to bruteforce it if you really wanted to, at least for wordpress. Which is why I have ynh admin panel available only in local network, as well as some other apps that I have available only locally.
Main frustration is with e-mail, because I used to use cloudflare and put some apps behind a login via cf, but using cloudflare on the main domain simply denies all incoming e-mail (and probably outgoing) due to openresolvers not being supported by spamhaus and other spam companies (which can be overcome, but the solution is silly).
Anyways, having the app access only via local domain would solve the issue of being able to bruteforce it (I assumed it had the functionality to do so after I viewed the settings, which was a wrong assumption), but I could also simply deny access via nginx to that path I guess if need be.
[16:03:45] <Aleks (he/him/il/lui)> wordpress_ynh is also supposed to include some fail2ban rule iirc
[16:04:00] <Aleks (he/him/il/lui)> (hm apparently nope)
[16:05:09] <Paprika> > <@Alekswag:matrix.org> if you down that road to be consistent you should also disable other places which can be bruteforce such as the yunohost sso portal ...

True, but not sure what's the best way to go about it, if it's even worth it.
[16:42:26] <Charles P.> Fail2ban should ban IPs trying to bruteforce
[16:42:32] <Charles P.> So not really worth it imo
[16:43:31] <Charles P.> Dont mind this message, doing some test with XMPP
[16:43:35] <Charles P.> Bis
[16:44:11] <Charles P. (XMPP)> XMPP bridge seems to merge two messages sent quickly enough
[16:44:18] <Charles P. (XMPP)> Neet
[16:44:31] <Charles P. (XMPP)> Oh, well it's just Conversations UI
[16:44:43] <Charles P. (XMPP)> Je ne m'attendais à rien mais je suis quand-même déçu :/
[16:53:05] <Aleks (he/him/il/lui)> https://media.tenor.com/ti5W9Mm0DZYAAAAC/captain-america-i-understood-that-reference.gif
[18:12:40] <Solrac> Hello! I'm recoverying from a broken drive and installed yunohost into a new drive and have the same domain (but not all apps) and I've 2 issues, one is synapse not installing but more importantly, the SSO redirects to SSO over and over, never to see the tiles
[18:12:56] <Solrac> How can I begin to troubleshoot this? I can't acess any of my apps
[18:15:25] <Aleks (he/him/il/lui)> can you reproduce the issue on another browser or using private browsing
[18:16:42] <Solrac> huh...nope
[18:16:42] <Solrac> so I guess it's a cache thing?
[18:16:42] <Aleks (he/him/il/lui)> yup
[18:17:03] <Aleks (he/him/il/lui)> i guess you can try force-clearing the cache with Ctrl+Shift+R (on Firefox) or whatever key combination or your browser
[18:21:04] <Solrac> Clearing the Storage of the site (via F12->Storage) works on Firefox based browsers
[18:21:30] <Solrac> Now regarding synapse, is this an appropriate place to ask about it?
[18:21:48] <Aleks (he/him/il/lui)> i guess
[18:52:51] <Solrac> I did a massive oopsie; I had it already installed to a subdomain, of course, I got "file exists" errors; this was a confusion cause I could've sworn that the first time I installed it, it failed
[18:52:57] <Solrac> so my apologies
[20:20:25] <Salamandar> not yunohost related but oh, damn, Cinny becomes really nice
[20:20:26] <Salamandar> https://aria.im/_matrix/media/v1/download/matrix.org/bNTOjETlrzjDoVAEcFZImOSn
[21:55:43] <tane> Offtopic: Just popping back in to say how much I appreciate Yunohost and the community behind it (especially Titus and Aleks). Possibly two years now with Yunohost and it is fn amazing. Thank you.
https://tane.harre.nz/yunohost/
[23:51:42] <Paprika> If I wanted to do Full (Strict) Cloudflare SSL, I need to add ssl info to nginx config. Question is, do I alter that in `/etc/nginx/sites-available` or in `/etc/nginx/conf.d/domain.conf`?
EDIT: Nevermind, found my answer by reading the files.