!RROtHmAaQIkiJzJZZE:nixos.org

NixOS Infrastructure

386 Members
Next Infra call: 2024-07-11, 18:00 CEST (UTC+2) | Infra operational issues backlog: https://github.com/orgs/NixOS/projects/52 | See #infra-alerts:nixos.org for real time alerts from Prometheus.120 Servers

Load older messages


SenderMessageTime
19 Nov 2025
@adam:robins.wtfadamcstephensmaybe a bit more explicit than the others, so could drop the last match17:42:04
@vcunat:matrix.orgVladimír Čunát

🤷 deployed

      locations."~ ^/job/[^/]+/[^/]+/[^/]+/latest/download-by-type/[^/]+" = {
        proxyPass = "http://hydra-server";
      };

(temporarily)

17:42:55
@adam:robins.wtfadamcstephenshmm, still no luck17:44:24
@adam:robins.wtfadamcstephensstrangely it works for curl with a distrobuilder user-agent, but not with the go program itself. 17:48:50
@adam:robins.wtfadamcstephensI'm assuming that's anubis trusting curl, but detecting the go application and blocking it17:50:48
@adam:robins.wtfadamcstephensnot sure why that regex isn't matching though. :/17:58:33
@vcunat:matrix.orgVladimír Čunát 🤔 appended another /[^/]+ to cover the whole URL, I think. But I don't know. 18:05:54
@adam:robins.wtfadamcstephens i think the ~ is a partial match. but i'm also pretty rusty with nginx rules 18:10:55
@adam:robins.wtfadamcstephensstill fails18:11:16
@vcunat:matrix.orgVladimír ČunátI also thought, but it was easy to try when we lack ideas.18:24:45
@ghpzin:envs.netghpzinIf anubis update is suspected, there was a mention about blocking "Docker / OCI registry clients" by default accidentally in 1.23.0+ https://github.com/TecharoHQ/anubis/pull/1253 (there is a way to opt-in fix it in 1.23.1)18:45:52
@ghpzin:envs.netghpzin* If anubis update is suspected, there was a mention about blocking "Docker / OCI registry clients" by default accidentally in 1.23.0+ https://github.com/TecharoHQ/anubis/pull/1253 https://github.com/TecharoHQ/anubis/releases/tag/v1.23.1 (there is a way to opt-in fix it in 1.23.1)18:47:54
@adam:robins.wtfadamcstephensThat seems an unlikely issue as this isn't a docker/oci client19:07:45
@teutat3s:pub.solarteutat3s Maybe related, we noticed more breakage than just docker / OCI clients with the update from anubis 1.22 to 1.23, specifically codeberg pages (pages-server) was no longer able to reach our forgejo. I don't have a specific commit to point the finger at, but my impression is that anubis 1.23 somehow applies stricter rules. 19:17:27
@teutat3s:pub.solarteutat3s * Maybe related, we noticed more breakage than just docker / OCI clients with the update from anubis 1.22 to 1.23, specifically codeberg pages (pages-server) was no longer able to reach our forgejo. I don't have a specific commit to point the finger at, but my impression is that anubis 1.23 somehow applies stricter rules.
EDIT: Downgrading to anubis 1.22 fixed our specific issue.
19:18:55
20 Nov 2025
@user12592851:matrix.orgJohn joined the room.05:31:05
22 May 2021
@grahamc:nixos.org@grahamc:nixos.org set the history visibility to "world_readable".17:01:28
@grahamc:nixos.org@grahamc:nixos.org changed the room name to "" from "".17:01:28
@cole-h:matrix.orgcole-h joined the room.17:03:05
@andi:kack.itandi- joined the room.17:18:59
@sandro:supersandro.deSandro joined the room.17:21:35
@hexa:lossy.networkhexa joined the room.17:22:33
@7c6f434c:nitro.chat7c6f434c joined the room.17:24:51
@colemickens:matrix.orgcolemickens 🏳️‍🌈 joined the room.17:26:27
@qyliss:fairydust.spaceAlyssa Ross joined the room.18:02:00
@toonn:matrix.orgtoonn joined the room.18:54:47
23 May 2021
@lukegb:zxcvbnm.ninjalukegb (he/him) joined the room.00:25:48
@sternenseemann:systemli.orgsterni joined the room.00:32:36
@lukegb:zxcvbnm.ninjalukegb (he/him) changed their display name from lukegb to lukegb (he/him).01:33:07
@sumner:sumnerevans.comsumner joined the room.04:51:52

Show newer messages


Back to Room ListRoom Version: 6