2026-02-27T11:07:38  <henne> the "legacy" proxy is still DDOS'ed?
2026-02-27T12:01:13  <acidsys> hi henne, I implemented POW challenge for wikis which helped. I want to enable it for hackweek.o.o and events.o.o as well, but I meant to ask you if there are any non-human paths I should exclude (like API endpoints or similar). might as well do that now? :)
2026-02-27T12:51:23  <henne> acidsys: I get you a list of path's
2026-02-27T12:52:22  <henne> acidsys: but I guess you can start without, it'll not be very long
2026-02-27T12:59:10  <henne> acidsys: you distinguish between HTTP methods?
2026-02-27T13:00:33  <henne> like GET, POST, DELETE etc.
2026-02-27T13:01:33  <acidsys> yes so far we only protect GET
2026-02-27T13:02:11  <henne> I highly doubt that many people start fresh with anything else but I'm not sure...
2026-02-27T13:03:09  <acidsys> good point
2026-02-27T13:03:22  <acidsys> unless it's some scripting
2026-02-27T13:03:40  <henne> oh well.. probieren ist besser als studieren...
2026-02-27T13:04:30  <acidsys> jawohl
2026-02-27T13:07:01  <henne> then on events.o.o it's only /api and on hackweek.o.o it's /rails
2026-02-27T13:50:18  <acidsys> ok great
2026-02-27T16:00:35  <matrix-o-o> <Lubos Kocman> acidsys: many many thanks for getting the kudos working externally sir! Also for the PRs you rock!!! :-) Now I have temptation to add you to DB so we can test it :-)
2026-02-27T16:02:21  <matrix-o-o> <Lubos Kocman> I just updated the version to contain the latest changes
2026-02-27T16:02:30  <matrix-o-o> <Lubos Kocman> * kudos
2026-02-27T17:28:08  <acidsys> glad it's working :)
2026-02-27T17:28:40  <matrix-o-o> <Lubos Kocman> acidsys: I did a simple backup solution with systemd timer (all packaged in)
2026-02-27T17:29:28  <matrix-o-o> <Lubos Kocman> with /var/lib/kudos/backups used for backups
2026-02-27T17:29:29  <acidsys> neat .. we can add some rsync or similar to backup.i.o.o later
2026-02-27T17:29:38  <matrix-o-o> <Lubos Kocman> yup
2026-02-27T17:29:51  <matrix-o-o> <Lubos Kocman> btw I still strugle with usability without import of initial user batch from idp
2026-02-27T17:30:04  <acidsys> yeah that's what I meant in my issue too
2026-02-27T17:30:08  <matrix-o-o> <Lubos Kocman> but on the other hand I'd prefer to have it "tested" with smaller number of folks first to catch issues, setup matrix bot etc ...
2026-02-27T17:30:24  <matrix-o-o> <Lubos Kocman> I'll work out some phases
2026-02-27T17:30:40  <matrix-o-o> <Lubos Kocman> like first month group of 5 people test usability, no data loss etc
2026-02-27T17:30:41  <acidsys> maybe after the idp refactoring we'll have some more options to fetch users from an api
2026-02-27T17:30:47  <acidsys> but right now it's not so easy
2026-02-27T17:30:55  <matrix-o-o> <Lubos Kocman> we seriously have to also offer smaller size of badges preview for the page load :-)
2026-02-27T17:31:12  <matrix-o-o> <Lubos Kocman> I have membership database which has aliases which "should" match the db
2026-02-27T17:31:17  <matrix-o-o> <Lubos Kocman> so that could be like first round, and I could add each membership badge
2026-02-27T17:31:19  <matrix-o-o> <Lubos Kocman> e.g.
2026-02-27T17:31:47  <matrix-o-o> <Lubos Kocman> this would give us a big enough audience, but then people could ask why am I getting these emails etc :-)
2026-02-27T17:32:29  <matrix-o-o> <Lubos Kocman> acidsys: also the initial packaging had sqlite.db in %files so we probably lost the content over past few days
2026-02-27T17:32:34  <matrix-o-o> <Lubos Kocman> this is all fixed now
2026-02-27T17:37:17  <matrix-o-o> <Lubos Kocman> do we have any good place to run the matrix bot? or if we're runnig some other bots in that location that would be perfect, alternatively I could run it from the kudos-vm but ... I'm not sure if it's really smart ...
2026-02-27T17:39:00  <acidsys> currently all matrix related things are on matrix.i.o.o, but not sure how to feel about adding more things there, it's alread a pain to update with the current mess
2026-02-27T17:39:35  <acidsys> I think it's fine to run on your kudos vm if it's not too resource hungry?
2026-02-27T17:40:09  <matrix-o-o> <Lubos Kocman> nah
2026-02-27T17:40:14  <matrix-o-o> <Lubos Kocman> it's a little script
2026-02-27T17:40:30  <acidsys> then it's fine, just need to allow https to matrix.o.o (or wherever you connect to)
2026-02-27T17:40:32  <matrix-o-o> <Lubos Kocman> there is also one script that can grant person arbitrary badge (for like mass changes etc)
2026-02-27T17:40:44  <matrix-o-o> <Lubos Kocman> yup matrix.o.o would be the plan
2026-02-27T17:41:09  <matrix-o-o> <Lubos Kocman> looks like this for the user :-)
2026-02-27T17:43:34  <matrix-o-o> <Lubos Kocman> got to dress for the ball tonight. Cia folks and many thanks! Georg and please login. I need a test user :-)
2026-02-27T17:48:56  <acidsys> I already logged in first thing after I deployed it
2026-02-27T17:49:31  <acidsys> ahh it was deleted. logged in again now
2026-02-27T18:03:30  <matrix-o-o> <knurpht - Gertjan> Same here
2026-02-27T19:57:22  <matrix-o-o> <malcolmlewis> SFaulken: It was reported 02/23
2026-02-27T19:58:54  <matrix-o-o> <malcolmlewis> SFaulken: #poo197009
2026-02-27T22:59:44  <acidsys> henne: it's deployed now, if anything comes up let me know and I will amend the rules