@r3g_5z@plem.sapphic.site
0e4c201f8d
HTTP header improvements ( #294 )
...
- Drop Expect-CT
Expect-CT has been redundant since 2018 when Certificate Transparency became mandated and required for all CAs and browsers. This header is only implemented in Chrome and is now deprecated. HTTP header analysers do not check this anymore as this is enforced by default. See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
- Raise HSTS to 2 years and explicitly preload
The longer age for HSTS, the better. Header analysers prefer 2 years over 1 year now as free TLS is very common using Let's Encrypt.
For HSTS to be fully effective, you need to submit your root domain (domain.tld) to https://hstspreload.org . However, a requirement for this is the "preload" directive in Strict-Transport-Security. If you do not have "preload", it will reject your domain.
- Drop X-Download-Options
This is an IE8-era header when Adobe products used to use the IE engine for making outbound web requests to embed webpages in things like Adobe Acrobat (PDFs). Modern apps are using Microsoft Edge WebView2 or Chromium Embedded Framework. No modern browser checks or header analyser check for this.
- Set base-uri to 'none'
This is to specify the domain for relative links (`<base>` HTML tag). pleroma-fe does not use this and it's an incredibly niche tag.
I use all of these myself on my instance by rewriting the headers with zero problems. No breakage observed.
I have not compiled my Elixr changes, but I don't see why they'd break.
Co-authored-by: r3g_5z <june@terezi.dev>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/294
Co-authored-by: @r3g_5z@plem.sapphic.site <june@terezi.dev>
Co-committed-by: @r3g_5z@plem.sapphic.site <june@terezi.dev>
2022-11-20 21:20:06 +00:00
r3g_5z
f90552f62e
Drop XSS auditor
...
It's deprecated, removed in some, by all modern browsers and is known
to create XSS vulnerabilities in itself.
Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-19 20:40:20 -05:00
FloatingGhost
fb5f846e8c
Add languages
to cheatsheet
2022-11-18 11:22:30 +00:00
Norm
14c1a4220b
docs: Update list of clients ( #284 )
...
In addition to making the page refer to Akkoma instead of Pleroma, I've
also removed clients that were not updated in a year or more and updated
links to websites and the contact links of authors.
Also removed language that suggested these clients are in any way
"officially supported".
Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/284
Co-authored-by: Norm <normandy@biribiri.dev>
Co-committed-by: Norm <normandy@biribiri.dev>
2022-11-18 11:19:37 +00:00
floatingghost
9deae8c533
Merge pull request 'docs: Update links to list of akkoma instances' ( #278 ) from norm/akkoma:update-akkoma-list-urls into develop
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/278
2022-11-16 10:16:27 +00:00
FloatingGhost
d4ca1217d3
Be very specific about the double-quotes in strings
2022-11-16 10:13:41 +00:00
Francis Dinh
7a833aff90
docs: Update links to list of akkoma instances
...
The old links were for Pleroma instances and one of them isn't even active anymore.
2022-11-15 07:51:19 -05:00
FloatingGhost
893bfde66f
Remove references to soykaf
...
Fixes #271
2022-11-14 00:01:31 +00:00
FloatingGhost
634463ff64
fix requirements
2022-11-11 16:07:07 +00:00
FloatingGhost
dcc36df8cf
add manual deploy for docs
2022-11-10 10:55:57 +00:00
FloatingGhost
539c6d6666
update requirements.txt
2022-11-10 03:40:36 +00:00
FloatingGhost
66eb844bd2
Update documentation builder
2022-11-10 03:38:10 +00:00
FloatingGhost
53fbe26c80
reference "stable" in all URLs
2022-11-09 13:22:44 +00:00
FloatingGhost
e0032e4799
Add rollbacks for associated_object_id
2022-11-07 00:08:20 +00:00
FloatingGhost
16a31872fe
document local_bubble
2022-10-21 10:23:07 +01:00
FloatingGhost
5231d436d1
Add docker migration guide
2022-10-18 16:16:55 +01:00
FloatingGhost
deba1d25f5
add DB restart to docker file
2022-10-17 16:29:36 +01:00
floatingghost
66f913355a
Docker builds ( #231 )
...
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/231
2022-10-16 19:25:54 +00:00
FloatingGhost
47a793f33e
include requirement to enable HTTP tunnel in tor
2022-09-20 14:40:32 +01:00
floatingghost
5827f7781f
Add installation note about flavour, support special cases ( #222 )
...
Fixes #210
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/222
2022-09-20 11:04:26 +00:00
floatingghost
b2aa82cee5
Fix false error in meilisearch index ( #221 )
...
the schema changed
https://docs.meilisearch.com/reference/api/documents.html#add-or-update-documents
this wasn't breaking anything, it would just report errors that were actually successes
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/221
2022-09-20 10:36:21 +00:00
Norm
00f840fd44
Update styles.json path in frontend config doc ( #212 )
...
Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/212
Co-authored-by: Norm <normandy@biribiri.dev>
Co-committed-by: Norm <normandy@biribiri.dev>
2022-09-14 10:20:07 +00:00
floatingghost
b8190f19dc
2022.09 stable release chores ( #206 )
...
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/206
2022-09-10 14:44:17 +00:00
floatingghost
2641dcdd15
Post editing ( #202 )
...
Rebased from #103
Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/202
2022-09-06 19:24:02 +00:00
FloatingGhost
25111bb407
include frontend installation document on all install guides
2022-08-30 10:56:33 +01:00
floatingghost
df39cab9c1
Automatic status translation ( #187 )
...
Fixes #115
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/187
2022-08-29 19:42:22 +00:00
FloatingGhost
85137f591f
Add ability to obfuscate domains in MRF transparency
2022-08-27 11:57:57 +01:00
floatingghost
11ec9daa5b
API compatibility with fedibird, frontend config ( #163 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/163
2022-08-17 00:22:59 +00:00
floatingghost
37a1001b97
add finch outbound proxy support ( #158 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/158
2022-08-14 23:13:49 +00:00
FloatingGhost
74dbea4cf8
add masto-fe docs
2022-08-11 17:43:34 +01:00
ShariVegas
273e51cb4a
Update 'docs/docs/installation/migrating_to_akkoma.md'
...
I ran into an issue after migrating, admin-fe wouldn't function properly. Ran the above command for my build, and got that functionality back.
2022-08-05 16:30:33 +00:00
Norm
499d8a1056
Merge branch 'develop' into fedora-install
2022-08-05 05:03:00 +00:00
Norm
6b85b36e3a
Fix postgres install and setup for fedora guide
...
Fedora requires some additional setup to work with Pleroma compared to Ubuntu/Debian.
2022-08-05 05:02:42 +00:00
Norm
b5d06a3db8
docs/installation: Update required Elixir version to 1.12
...
Some dependencies will refuse to work on Elixir 1.10 (and presumably 1.9). One dependency states 1.13 as a requirement but will still work on 1.12 just fine.
2022-08-03 12:01:13 +00:00
floatingghost
ca000f8301
Merge mrf_simple-reject with quarantine ( #137 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/137
2022-08-02 14:19:24 +00:00
Joel Beckmeyer
e26388a01c
Support reaching user@sub.domain.tld at user@domain.tld ( #134 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/134
Co-authored-by: Joel Beckmeyer <joel@beckmeyer.us>
Co-committed-by: Joel Beckmeyer <joel@beckmeyer.us>
2022-08-02 13:54:22 +00:00
floatingghost
2c8f57db98
rename-flavours ( #123 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/123
2022-07-28 10:36:51 +00:00
Fristi
7380dc0256
Added installation guides for redhat linux distributions, includes OTP build guide for fedora. ( #122 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/122
Co-authored-by: Fristi <fristi@noreply.akkoma>
Co-committed-by: Fristi <fristi@noreply.akkoma>
2022-07-28 10:19:32 +00:00
floatingghost
645f0390bc
Prepare for ubuntu22 murdering openssl ( #120 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/120
2022-07-27 21:48:13 +00:00
floatingghost
90c4785b89
remove public post quarantine exception ( #114 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/114
2022-07-26 11:09:13 +00:00
floatingghost
1419eee5df
Quote posting ( #113 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/113
2022-07-25 16:30:06 +00:00
floatingghost
c4e9c4bc95
extend custom runtime system ( #108 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/108
2022-07-24 16:42:43 +00:00
FloatingGhost
0f132b802d
purge chat and shout endpoints
2022-07-21 11:29:28 +01:00
floatingghost
729f45ccd2
purge ldap authenticator ( #92 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/92
2022-07-20 12:49:13 +00:00
FloatingGhost
a2b384d572
document scrobbling purge
2022-07-19 17:22:02 +01:00
Sol Fisher Romanoff
f95f35a1ab
doc: update repo link from docs to akkoma
2022-07-19 12:36:09 +03:00
floatingghost
54ed8760ff
Merge branch 'from/upstream-develop/tusooa/server-announcements' into 'develop' ( #85 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/85
2022-07-18 13:08:36 +00:00
floatingghost
d2a185c013
Documentation updates for stable release ( #73 )
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/73
2022-07-15 12:27:16 +00:00
floatingghost
bcdbbad037
Merge pull request 'remove the docs for stuff i didn't do' ( #72 ) from remove-weird-frontend into develop
...
Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/72
2022-07-14 11:11:37 +00:00
FloatingGhost
d0366705d8
remove the docs for stuff i didn't do
2022-07-14 12:11:00 +01:00