Egregoros

@f0x @bajax @jeru Somebody gotta tell jeru that he clicked on the "don't federate correctly" button.

@p @bajax @f0x WHICH FUCKING BUTTON I NEED HALP

@jeru @f0x @p lemme check I had to do this a while back

@jeru @f0x @p do you configure via file or admin UI?

@f0x @jeru @p anyway either do

 config :pleroma, :activitypub,
    authorized_fetch_mode: false

in prod.secret.exs or this setting in the admin UI:

@bajax @f0x @p @jeru It's not that I think. Requests returns 404 Not Found, so it's the other break federation button/config.

config :pleroma, :restrict_unauthenticated,
  activities: %{local: false, remote: true}

if you want to restrict access to remote posts, but not break federation.
pleroma-broken-federation-local-activities.png

@phnt @bajax @f0x @p how is it broken?

@jeru @bajax @f0x @p There's an annoying bug in Pleroma where if you disable access to local activities from the API, it also blocks access to them for fedi servers resulting in broken threads/missing posts.

@phnt @jeru @bajax @f0x I think mint filed a ticket some time back.

@phnt @bajax @f0x @jeru That is the one, yes. I keep forgetting which it is so I have screenshat this and put it in the "fse/techsupport" subdirectory of the place where the memes are.

@p @bajax @f0x @jeru I'll fix it eventually, since nozaki@mugicha has that permanently enabled even after I told him it breaks federation, I won't at least forget about this being a thing.

@phnt @f0x @p @jeru so is it actually a bug or just a consequence of intended behavior?

@bajax @f0x @p @jeru I don't know if it was originally intended, but MastoAPI configuration affecting federation is a bug to me. If someone wants to nuke federation the proper way, they can enable signed fetch enforcement and require everyone to sign their requests.

@phnt @bajax @f0x @p @jeru Yet /ostatus_subscribe endpoint isn't blocked so you can federate anything you want, including your own internal.fetch actor ;)

@mint @bajax @f0x @p @jeru They are handled by different controllers internally. One probably has the require authentication plug in it and the other doesn't.

@phnt @f0x @p @jeru make your software completely unusable to own the chuds

@phnt @bajax @f0x @p @jeru it's a single line fix too

@bajax @phnt @f0x @jeru It is not supposed to stop posts from being fetched.

@phnt @bajax @f0x @jeru

> nozaki@mugicha has that permanently enabled even after I told him it breaks federation

@p @bajax @f0x @jeru "If it doesn't bother my users, I will keep it enabled."

@phnt @bajax @f0x @jeru Unknown unknowns.
rumsfeld.gif