Did I miss something? They didn’t post any real evidence at all unless there was a link I didn’t find.
What the post is describing sounds exactly like the post getting flagged by users, then uncensored by the mod team later on.
I’m both an HN user of more than a decade, AND a massive HN hater. I’m predisposed to assume the worst, but there’s very little meat to this allegation.
To spare anyone else the click, this is about one blogger malding that his flamebait posts got flagged.
First post cited was about leaving Element/Matrix because they’re bad, second was an Omarchy showcase.
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Lemmy is optional, and the project is hosted on Github.
Seconding this answer. The error message and description scream envvar issue.
This is my first time using systemd, so I’m not sure if I am overlooking an obvious step or what.
@gedaliyah@lemmy.world Did you run a systemctl daemon-reload after making the PassEnvironment change to your service file?
Welcome to Lemmy! Sincerely hope you can find some reprieve from your physical circumstances here.
As a friendly heads up, you posted this thread to a tech-related board. Your post may be removed for that reason, but you should consider reposting on a more general comm such as !casualconversation@piefed.social.
Yeah, I believe you don’t need to extend Caddy at all for that.
Add a properly-formatted Authorization header to any requests you make to the server and it’ll work. See Wikipedia page for header string format:
https://en.wikipedia.org/wiki/Basic_access_authentication
On the webpage side, I’d have the login form make a POST to your login endpoint using a basic auth header to pull a JWT that acts as a “real” auth key for other pages.
This is all assuming you want to stick with basic auth as opposed to a more heavyweight option.
How does programmatic access tie into the desire for a login form?
Either way, you can do a login form -> basic auth forwarding page by rigging up some simple JS, or access programmatically in a direct way by simply setting a manual Authorization header.
Not to detract from the article, but this has actually been a long time coming and known as a vector for decades.
It’s extra work to maintain and test another release format — and the core developers want to focus on making software.
No one is stopping you from rolling your own flatpak.
Lobste.rs might be up your alley.