hhmx.de

IT Notes

Föderation · Sa 08.02.2025 16:10:32

Menel

Föderation EN Sa 08.02.2025 16:19:40

@itnotes@snac.it-notes.dragas.net

Edit: next time I'll write this under your main account, only noticing now that this is kind of bot like... 😀

Interesting you writing about this, I actually did this too, after adding the /s/ path, I modified my rule to:
^/[^/]/[xs]/
For posted Media and remote cached together, , but I've seen snac adds the "no-cache" ,and related header content, and my caching for /x/ was ignored. Then I wondered if there is security problematic content stored, for snac using these headers. I see you overwrite it with "ignore header"

I managed to overwrite it with apache2 httpd only by setting the cache control header explicit myself to something else. I don't know enough about it all.
I'll have to check if snac will send other headers when I request media under /x/ with a logged in account.
I did all my tests with plain curl after all.

#Data #Fediverse #Hosting #ITNotes #Networking #Nginx #NoteHUB #Ownyourdata #Server #Snac #Snac2 #Social #Tipsandtricks #Tutorial

Stefano Marinelli

Föderation · Sa 08.02.2025 16:32:32

Yes, I've decided to ignore the header, so caching will work. I think that, by default, caching is ignored as the original poster could delete it. When in cache, it will still be served, even if deleted.

CC: @itnotes@snac.it-notes.dragas.net @menel@snikket.de

Menel

Föderation EN So 09.02.2025 08:04:14

@stefano@fedihome.stefanomarinelli.it
@itnotes@snac.it-notes.dragas.net

Oh, It seems /y/ is a thing too.

Looking at my logs about caching and see

/social/menel/y/4253823d1b0db14d7284a6a7597ee688/xn--baw-joa.social/system/accounts/avatars/110/792/600/309/100/406/original/bb76d18d7b79b649.jpg

I guess we could that /y/ path too...

Stefano Marinelli

Föderation · So 09.02.2025 15:52:11

Interesting - I haven't seen any reference to /y/, but I've also tried to see how those proxied media were rewritten.

@grunfink@comam.es - what's the difference between the /x/ and /y/?

CC: @itnotes@snac.it-notes.dragas.net

The Real Grunfink

Föderation · So 09.02.2025 16:55:51

They are both for proxied media, but using different way of authenticating. Basically, one for the web UI, and the other for the Mastodon API.

CC: @menel@snikket.de @itnotes@snac.it-notes.dragas.net