| 26 Aug 2024 |
 olivia | probably just gonna keep it running 24/7 | 01:23:50 |
| olivia | In reply to@benjamin:computer.surgery
I'm planning to use this for debugging problems like "I can't join this specific public room", where it's hard to reproduce in isolation (until now I've mostly been doing these by deploying test changes to our actual HS, but that's obviously not ideal) | 01:24:13 |
 TravisR | most people seem to just run a personal homeserver and use bleeding edge - sometimes it works, sometimes it doesn't 😛 | 01:25:34 |
| TravisR | it can sometimes be easier to see/find bugs when you're using it yourself daily | 01:25:54 |
| olivia | yeah for sure | 01:28:42 |
| olivia | my main HS runs against the main branch most of the time, but is shared with a few other people which is why testing fixes is tricky | 01:29:22 |
| olivia | it would definitely be less tricky if it was just me | 01:29:30 |
| olivia | tangentially related: the difficulty of reproducing problems in isolation is a huge part of what makes HS development tricky. I'd love a systemic approach for this, but haven't found any yet | 01:30:49 |
| olivia | the bug I'm currently working on is fun because it's only triggered when joining a room that the HS has never seen before, so without hacky tricks you get exactly one chance to see if you've fixed it with a given HS before it's burned lol | 01:31:47 |
 NotHSDevNico | In reply to @benjamin:computer.surgery
people that run public servers for development: do you find that you need to keep the dev server online even when not using it so that it doesn't get heavily backoff-ed by other public HS? I usually just dev on my normal deployment... :D | 10:12:12 |
|  @ambiguous_yelp:matrix.org | 16:14:24 |
|  Shay changed their display name from Shay [away, back Aug 26th] to Shay [mostly offline today]. | 17:01:32 |
| 27 Aug 2024 |
| Shay changed their display name from Shay [mostly offline today] to Shay. | 15:19:41 |
 xiretza | In reply to @travis:t2l.io
Hey all, following up from https://matrix.org/blog/2024/06/26/sunsetting-unauthenticated-media/ - We've now got the media freeze in place on beta.matrix.org for folks to test how their clients (and servers) behave when presented with a media freeze. If you haven't already tested your feature detection, beta.matrix.org is a good place to try it out.
The happy path should be:
- Log in or register a new account
- Note that media from before today loaded fine
- Upload something new
- Still loads fine (including over federation)
If you have any questions or notice any bugs, let us know.
what am I doing wrong? beta.matrix.org is rejecting my federation media requests with M_UNAUTHORIZED/M_MISSING_TOKEN, even though I'm certainly sending X-Matrix (same code path on my side as all other outbound federation requests, which work fine):
$ curl -H 'Authorization: X-Matrix destination=beta.matrix.org,key="ed25519:HgIdvBXv",origin=blep.space,sig="CPG4ZXumthOo4llpHuyqOcod8OV4GdkMYNghElYhDjqqRpRdsZ48SePzqmfwnqSrjug2qJJL1MYZ3xoiyu/8Bw"' https://beta.ems.host/_matrix/federation/v1/media/download/371e22254988ad84cbb00413c5cebd1580d845981828456254842863616
{"errcode":"M_UNAUTHORIZED","error":"no auth provided (required)","mr_errcode":"M_MISSING_TOKEN"}
| 15:43:13 |
| xiretza | (server on my side is grapevine, with https://gitlab.computer.surgery/matrix/grapevine-fork/-/merge_requests/58 applied) | 15:46:06 |
| TravisR | The destination and origin are missing quotes. | 15:48:13 |
| TravisR | * The destination and origin values are missing quotes. | 15:48:21 |
| TravisR | Probably a MMR bug for caring that much about it, but adding the quotes fixes it | 15:49:11 |
 Olivier 'reivilibre' |
The values must be enclosed in quotes if they contain characters that are not allowed in tokens, as defined in Section 5.6.2 of RFC 9110;
yeah MMR bug | 15:49:23 |
| xiretza | yeah looking for the RFC right now, . is fine in non-quoted strings | 15:49:51 |
| xiretza | https://datatracker.ietf.org/doc/html/rfc9110#name-collected-abnf
Authorization = credentials
credentials = auth-scheme [ 1*SP ( token68 / [ auth-param *( OWS "," OWS auth-param ) ] ) ]
auth-param = token BWS "=" BWS ( token / quoted-string )
token = 1*tchar
tchar = "!" / "#" / "$" / "%" / "&" / "'" / "*" / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~" / DIGIT / ALPHA
| 15:53:18 |
| TravisR | https://github.com/t2bot/matrix-media-repo/issues/609 | 15:53:46 |
| xiretza | In reply to @travis:t2l.io
https://github.com/t2bot/matrix-media-repo/issues/609 thanks! | 15:54:09 |
|  Abuse Management banned  @jason:transfem.dev (ban evasion). | 16:25:01 |
| 28 Aug 2024 |
|  @its-amber:matrix.org joined the room. | 03:04:10 |
| @its-amber:matrix.org | Hello! I think(?) this is the right place to ask for homeserver setup help.
I have matrix synapse and nginx running in docker compose and I'm using nginx to reverse proxy to my matrix server. so my nginx login is mydomain.xyz and my matrix server is matrix.mydomain.xyz
This mostly works except that connecting to matrix.mydomain.xyz throws an SSL_ERROR_BAD_CERT_DOMAIN. I am guessing this is because the ssl cert i created is for "mydomain.xyz" and not "matrix.mydomain.xyz". and frankly i'm a bit lost on what to do about that. | 03:09:39 |
| @its-amber:matrix.org | * Hello! I think(?) this is the right place to ask for homeserver setup help.
I have matrix synapse and nginx running in docker compose and I'm using nginx to reverse proxy to my matrix server. so my nginx login is .xyz and my matrix server is matrix. .xyz
This mostly works except that connecting to matrix .xyz throws an SSL_ERROR_BAD_CERT_DOMAIN. I am guessing this is because the ssl cert i created is for " .xyz " and not "matrix. .xyz ". and frankly i'm a bit lost on what to do about that. | 03:10:43 |
| @its-amber:matrix.org | * Hello! I think(?) this is the right place to ask for homeserver setup help.
I have matrix synapse and nginx running in docker compose and I'm using nginx to reverse proxy to my matrix server. so my nginx login is [my_domain].xyz and my matrix server is matrix.[my_domain].xyz
This mostly works except that connecting to matrix.[my_domain].xyz throws an SSL_ERROR_BAD_CERT_DOMAIN. I am guessing this is because the ssl cert i created is for "[my_domain].xyz " and not "matrix.[my_domain].xyz ". and frankly i'm a bit lost on what to do about that. | 03:11:44 |
 morguldir | this room is for people making homeserver implementations, you probably want #synapse:matrix.org | 03:14:30 |
| @its-amber:matrix.org | ah, oops. thank you! | 03:14:44 |
