Yep Sorry guys, finally figured it out.
They decrypted my password through the Xsplit db leak and managed to login to my account.
Time to look at that 2FA plugin !...
Thanks again and apologies for the panic
I've sent some logs to security@nodebb and we'll go from there. I don't want to cause alarm because it could be somehow my password got compromised (though i have no idea how)
persona theme, but i think this was done via injection, they tried all kinds of things by the looks of it
Does any developer want to analyze my nginx logs ?
My password got compromised, nevermind.
Somehow a user posted under my account. and it was posted with the tag "cid-4-privileges-read". Because nodebb was in dev mode, the last requested links were
20/3 01:07  - warn: Route requested but not found: /groups/cid-4-privileges-read
20/3 04:18  - verbose: [translator] No resource file found for en_US/markdown, using provided fallback language file
20/3 04:21  - warn: Route requested but not found: /CHANGELOG.txt
20/3 04:21  - warn: Route requested but not found: /readme.html
20/3 04:42  - warn: Route requested but not found: /user/c???????
20/3 05:01  - warn: Route requested but not found: /category/27
20/3 06:57  - warn: Route requested but not found: /index.php?app=forums&module=extras§ion=stats&do=who&t=1234
20/3 09:34  - warn: Route requested but not found: /topic/189/hacker
Is there any log files i can see how this happened? I was running the forums on latest build in dev mode, guess that isn't helpful?
Wow, I've been wanting to develop a LetsEncrypt plugin for NodeBB for quite some time so if there is one now I will definitely take a look soon
@phl cheers for the suggestion, i changed my nodebb to run through nginx now, and got letsencrypt working that way for now
Hi there I've installed letsencrypt and got my domains authorized in the limited beta.
but I notice they only support apache and nginx.
I see an npm package for nodejs support https://www.npmjs.com/package/node-letsencrypt
Does someone need to make a nodebb plugin? how can i get this to work?