I am terribly sorry for this, but my admin still has not found the time and motivation to create a proper favicon for me.

Small correction: Preferences do get stored in the PDS, not in the AppView, but they are not part of the main account repository.

The rest seems correct.

Thats is not on me, I deleted your last account completely when you left.

App passwords, DMs, bookmarks, muted words/accounts and preferences get stored inside the AppView, in this case Bluesky.

Looks like their AppView store everything for every outside account/PDS combination?

Welcome back 👍

cc @danielmorrisey.com ⬆️

Your handle is perfectly valid, see -> bsky-debug.app/handle?handl...

You can change your handle to anything with *.altq.net while being hosted on me, that is intentional.

You can check you handle and DID status also with PDSls, see -> pdsls.dev/at://did:plc...

Including Audit log.

PDS hosters: folks should not have PDS_INVITE_REQUIRED=false in their config unless they know what they are doing.

at a minimum you need CAPTCHAs on all signup routes, to block/disable the createAccount API flow, etc.

we know this should be smoother.

If you host a PDS, please do not make it available on multiple DNS hostnames, see 🧵 ->

👋 Hello neighbors

Short outage in the last hour due to a regular kernel update reboot somehow breaking my hand crafted docker networking for the PDS.

It is now reverted to host mode and everything is working again.

FYI ->

I will continue to monitor this.

Network traffic/packets per second graph with spikes

After checking that I could access Bluesky with a different browser without login, I resorted to trying to restart the PDS and see if that helps.

And it did, apparently. Unclear what happened exactly or what caused it.

The graphs for this server do show a significant spike around that time ->

About 20 minutes ago I had to restart the PDS docker service manually, as all requests to the Bluesky infrastructure ended up in 5xx replies, according to the logs.

This was the first time I had to do this.

I noticed that my feed was not working anymore (timeout error).

->

Screenshot of a map showing various PDS servers in Southern Germany, including altq.net with 9 users.

Oh, I am on this map too -> arewedecentralizedyet.online/map/?source=at

javascript:alert("Does a javascript: URL exploit this guestbook?")

Nope.

javascript:alert("Does a javascript: URL exploit this guestbook?")

PDSls CAR explorer

PDSls CAR explorer (it's Jerry's repo archive)

1.3.0 introduces a CAR explorer to PDSls
pdsls.dev/car

Hello and welcome 👋

See ->

Hi there! 👋

If you use PDS Gatekeeper you will want to make this change manually to your /pds/composer.yaml instead of using pdsadmin update. Using pdsadmin update clears out your current compose with the one from the PDS repo. Should be a oneliner change

@baileytownsend.dev/pds-gatekeeper Microservice to bring 2FA to self hosted PDSes

This PDS server now supports two factor authentication via email. You can now activate 2FA in your account settings.

Thanks to tangled.org/@baileytowns... by @baileytownsend.dev

Hint for other PDS admins: When using Postfix as your mail server add ?tls=required at the end of the SMTP URL.

FYI #atproto: To use this new goat tool on the PDS server, create a shell alias like this:

$ alias goat="docker exec -it pds goat"

$ goat --version
goat version v0.1.2-rev-c43d54a

$ goat account --help
NAME:
goat account - commands for auth session and account management
[...]

Screenshot of the properly escaped and non-functional attempt to trigger an alert via <script> tag.

It does not work, as in this does not trigger an alert box in this "guestbook" on altq.net ->

Script test:

<script>alert('This should not work.')</script>

A tiny scriptlet or web component will do the trick, see the "guestbook" on the altq.net page for inspiration -> github.com/fry69/altq.n...