@scottalanmiller said in Which is better NodeBB or Discourse?:

@Joykiller said in Which is better NodeBB or Discourse?:

I personally hate Discourse due to their docker wrapper. but thats me.

Oh gosh, that would pretty much turn me away right there. Docker is great for devs, but makes little sense for production operations. Tends to come from shops that are run by devs and have little operational knowledge or experience. We just had a discussion about that last week in our forum: https://mangolassi.it/topic/19577/docker-for-production-use-of-third-party-software/

Docker is for lamers who don't know how to be system admins

And, of course, rapid development. When Docker first started making it's appearance I embraced it but was later aghast when folks started routinely deploying to production, and predicted to some buddies that some security nightmares were just around the corner... And they were.

But enough Docker bashing. I looked at Discourse long, long ago, in a far away galaxy (well, in Internet time, anyways). Ruled it out right away for following (admittedly highly opinionated) reasons:

• Docker centric: Now that I am primarily only on my own projects, I am free to abandon Linux in favor of what I consider to be superior OS's like FreeBSD and SmartOS. Nothing personal but platform lockin equates to vendor lockin. And that just ain't freedom enough for me

• Rails vs. NodeJS: Are you kidding? Was an early adopter of Rails back, circa 2003/4 or so? It rocked at that time as an alternative to then php stuff sporting the serious security hole of the day/week. Or so it seemed - php was pretty sketchy for a while there. Fast forward a decade and a half and it's freakin' no contest! Rails is all but history/legacy, at least in my mind.

• Main Dev Heads: Cool vs kind arrogant asshats (sounds like that may have changed). This was immediately off putting and I was kind of surprised Discourse became so popular, but I guess that's one thing fame will help you with.

So... note to the NodeBB devs:

Please do keep doing what YOU do best and do not worry too much about feature parity w/what, in my view, is an inferior, non starter platform just because they've got a few extra bells, whistles, and/or mindshare. Popularity more oft than not does NOT equal technical superiority but rather merely demonstrates whos' the better con men. Err.. marketing team....

Now obviously I do not mean to preclude a bit of cross pollination when it makes sense. But I have been around long enough to observe FOSS project loose their vision in the quest for "Feature Parity" with some perceived competition. So, just weighing in w/my $0.02 to encourage you to stay true to your vision. Cuz it's been workin' pretty good fer' me ;D

And finally, in closing, the astute may have noticed I enjoy making tongue in cheek comments from time to time for the humor value. Don't get yer' beak too tweaked, eh? It's not a religion for me.

Spot on Julian. You have discovered something many have known for decades but lacked the discipline and/or capability to practice in ever increasingly hectic world full of deadlines, phb demands, etc. Be interesting case study to observe uptake now that it has a cool name. Seriously.

I shall echo your sentiments wholeheartedly. Wanna really bend yer' noodle? Go smart phone free for a few days. Then a week.... Semi retired here and not carried one for a few years now. Very liberating to be free and I have had more than a few confide that they envy me. Having recouped more time you now have time to make plans, think creatively, etc.

It has long been a personal mantra of mine to read some print material regularly. Internet only tends to make one's concentration a bit too hyper after a period. Yer' brain needs longer articles and chapter books.

Try it. You might like it.

Just an update to note that I've bailed on SmartOS and PostgreSQL due to too many bumps in the road in favor of sticking with a well supported platform. Which pretty much translates to: "what the dev heads are using...".

I use fbsd for our in house stuff that I keep updated via build server and internal lan. When I need cloud scale smartos or linux are the best options. To wit I have not even tried fbsd and pgsql so cannot weigh in there.

Thanks for all the insights. I'll probably be back to bug ya' before too long.

o/

@rivalite said in nodebb allows users to change the skin and save this appearance?:

.. snip...

Hello, I just discover nodebb.
I have a few questions:
1.nodebb allows change the skin like Discourse?

Admin Control Panel -> Appearance -> Themes/Skins.

Four themes shipped. Sixteen or so skins.

2.Also, I just realize nodebb uploaded my image attached to this post, to imgur. I have to pay on imgur or somewhere for this feature?

No. You can host your images locally. Offloading to imgur is a possibility, but not necessity.

3. is there a free spanish translation?

No clue.

4.how many free skins are available?

No clue. Sixteen included w/default install. At least on 12.x

5. Is it possible migrate from xenforo 2.x ?

Probably. But likely to be a headache for the uninitiated. You may want to explore contracting some expertise.

6.I just signup here using an email from https://temp-mail.org/ . Is there a spam filter to don't allow users signup with https://temp-mail.org/ ? This spam filter is free?

No clue w.r.t. temp-mail.org. NodeBB does include some more generic protections. See e.g. nodebb-plugin-spam-be-gone.

Thanks so much!

You're welcome. Enjoy!

@omega said in automatic temporary ban of a troll user with minus X votes:

@gotwf said in automatic temporary ban of a troll user with minus X votes:

First off: Lot of good discourse in this thread. Lame pun intended.

@omega said in automatic temporary ban of a troll user with minus X votes:

....

Disagree w/above though. Too much added complexity. KISS.

Tough crowd, always with the tomatoes... try this one:

Let the Mods be Mods, let the Users be Users and Admins be King & Queen, forum developers could be Heros!

Granted it's more BOWIE than KISS but you get the point right?

Oooh, la, la!!! Good one. Yeah, I'll take Bowie. Had the good fortune to see Bowie live way back in the day. Spectacular showman. Indeed. Followed Stevie Nicks. But I digress....

Maybe you missed that I got your point. At least w.r.t. the root causes of the issue. My point is that AI is not the solution for all things because AI, by its very nature, lends itself to becoming gamified and one consequently finds themselves in a never ending bot arms race.

A community needs to behave like an actual community and help the good guys do their jobs policing the bad guys. We need the human factor because we need the human touch and human oversight. And hopefully some human hard won wisdom as well.

The larger the community the more mods, etc. required. We all get that many lurk, fewer post, fewer yet are active contributors..... But hopefully.... on a prayer and one wing... good mods and helpers emerge. And it seems they will, in my experience, but it takes time - needs to develop organically and no real short cuts.

In the meanwhile... are we able to make a knob that actually works for that? With us rather than against us? Tough cookie, for sure.

Oh and can we have a better grammar-typo bots for my posts...

No.

Initial draft for gotwf nodebb email how-to two cents worth. Confusion over email seems to be a recurring issue so I thought I'd take a stab at culling and consolidating the salient bits. Caveat emptor.

tl;dr: NodeBB recommends using a third party emailer like Sendgrid because they have better deliverability. And so do I. At least if you're coming at this looking to get NodeBB sending email with the least amount of effort.

NodeBB Email Options

NodeBB Offers Several Ways to Send Email:

1. Emailer plugins: There are a few plugins like the MailChimp plugin which operate directly with various email providers. I'll leave configuration of such to their respective plugin documentation.

2. SMTP transport: NodeBB has built-in support for SMTP, so you can use a Gmail account for instance to email your users. This is pretty self explanatory. Season details to scratch your provider's itches.

3. Sendmail: NodeBB supports using sendmail on Linux to send emails. To do this you just turn off the SMTP transport and make sure no email plugins are enabled.

   sendmail, the executable, will send mail via a variety of transports.

   man sendmail(8) speaketh thusly:

   Sendmail sends a message to one or more recipients, routing the message over whatever networks are necessary. Sendmail does internetwork forwarding as necessary to deliver the message to the correct place.
   .....
   ..... snip, snip.....
   .....
   With no flags, sendmail reads its standard input up to an end-of-file or a line consisting only of a single dot and sends a copy of the message found there to all of the addresses listed. It determines the network(s) to use based on the syntax and contents of the addresses.

   If the recipient is not known locally, i.e. a local user/domain, then the server's resolver subsystem should, (contingent upon configuration) return the MX record for the domain at hand and attempt a delivery. Whether or not that MX accepts your mail is at the mercy of their assessment of your server's legitimacy. At minimum you will need matching forward and reverse DNS enteries, and likely an SPF record, for example. Others will automatically put you on their blacklist even if your stuff is squeaky clean and require a near act of god to be removed.

   Handling of refused, bounced, etc. mail is, once again, contingent upon configuration. One should ensure their mail queues do not become constipated to the extent undeliverable mail exhausts disk space, thereby effectively creating a DOS.

4. One may also run a MX daemon such as Postfix on their NodeBB host. Running as a daemon has advantages for certain use cases. In which case, I recommend deploying Postifx as a Null Client. Quoting from preceeding:

   A null client is a machine that can only send mail. It receives no mail from the network, and it does not deliver any mail locally.

   One must therefore have some OTHER, supplementary MX that will receive mail for your domain. Else opt for a more complex Postfix configuration.

   Example screenshot NodeBB side utilizing Postfix Null Client running on the local host and listening on port 25:

   

   Selecting the Custom Service pull down may seem counter intuitive but this is the option you need to populate parameters for your localhost null client.

   Connection security should be None. Else if you invoke STARTTLS NodeBB side then of course Postfix will endeavor to oblige (depending on config). I am of the opinion that if you need TLS for the localhost to talk to itself then you likely have much larger concerns. Username and Password should not be necessary for local submission.

   Conversely, it is highly advisable to use TLS when talking to external SMTP servers. Free certificates are available thru Let's Encrypt. Numerous Acme Clients are available. I favor Dehydrated Boulders

   This approach also requires configuration of additional cogs and widgets such as matching forward and reverse DNS enteries and likely an SPF record, for example, that are beyond scope of the present discussion.

Note: Postfix was designed to be a drop in replacement for Sendmail and many Linux distributions include it as part of their default installs. In which case the sendmail executable mentioned above may be Postfix's version, or perhaps be a symlink. This can cause confusion with Options 3 and 4 above so if you're running into issues please clarify when running as a daemon.

Something seemingly simple at first blush can pose more than a few sticky wickets and why I recommend following @julian et.al.'s advice and opt for the low hanging fruits offered by the first two options. Unless you have a clear use case not to. Learning how to do all of this stuff is a legitmate use case. Just be forewarned that you may experience a bit of trial by fire if you are learning the zen of email administration on a production system.

Much thanks to @scottalanmiller for the advice and an embarrassing amount of hand holding. I'm now rocking an nginx tls proxied nodebb sporting Centos7, mongodb, and redis for session management.

Okay, I'll play...

Wishing You & Yours All The Best

Rock on!

P.S.; Happy Ray Troll Thursday. Wear 'em if ya' got 'em.

I'm curious to know if any nodebb gurus are serving up nodebb via nginx https enabled reverse proxy and using modsecurity?

@ben-coyle2 No, I don't think you are being stupid or dim. Apparently there are gremlins afoot here. Post up your nginx config, eh?

@nicolas None at all, even beyond scope of nodebb?

@bugmenot

Perhaps the up/down chevrons lower right in screen shot below are the droids ye' be lookin' for...??

Just in case you missed it?

Yes, I grok that is not the same as pagination for paginated threads.

P.S.; Cool that Vivaldi is using NodeBB. I was early adopter of Opera bitd when it fit on a floppy.

@baris said in Help Fine Tuning Advanced Cache Settings:

@baris said in Help Fine Tuning Advanced Cache Settings:

/admin/development/info

New one for me. And pretty nice. Is this documented somewhere? Or is it one of those top seekrit dev thangs...

Thx--

@onur-baran Same as it ever was.... When it's ready. And hopefully not before.

Sorry, just couldn't resist.

But dinnae fash yersel... some body more knowledgeable than I will be comin' along this trail.

Talking to myself here but ... yet more ponderings...

NodeBB chat/pm seems to target the expected use case of users chatting actively whilst online, while making provisions for messaging and notification should they not. Yes, you can set preferences to also be notified via email, but those messages are still stored on server. Hence admins, law enforcement, etc. have potential to investigate should some whack job stalker join up and end up physically harming another member. I don't joke. It has happened. Fortunately not to me.

Contrast that with some boards that don't do real time chat in favor of piping message thru an email system for delivery. I am guessing to conserve on bandwidth and storage resources. This seems like a much greater potential for abuse by forum spammers cuz now they can blast entire forum populations w/o any push back until folks start checking email. Email has become essentially unusable for many such that they never check it unless they are expecting something. Like a confirmation or password reset.

Hence, it is pretty groovy that the nodebb devs were smarter than that.

Things seem to be working more normally now. I'd turned multi-container add-on off for a few days. During that time, seems there may have been an update cuz all my custom containers were gone when I re-enabled. Or did something change nodebb server side?

worker.js still does not fire on every reload unless you do a full refresh but at least avatars, etc. display properly once again.

Just an updated data point, for whatever it may be worth. ymmv--

@daftcyborg I have my stuff set up as you describe. Had to fiddle w/it a bit to limit as you desire. Posted up a reply to someone inquiring similarly some months back but ... forget now how I did it. Maybe make a search addin my username?

Ah, here ya' go:

https://community.nodebb.org/topic/14870/bug-in-recent-cards-plugin?_=1613979515333

Scroll down to the ACP screenshot I posted.

That was on 12.x. Unsure about current.

Have fun. o/

One thought occurs to me belatedly: Maybe have a knob in the ACP that allows limits to be set on the number of "participants" to be added to group chats, w/exceptions for administrators and/or moderators. Not going to foil dedicated asshats but maybe at least raise the bar enough such that the first wave or two of victims have an opportunity to report/flag before they can assault the community at large. IOW, make them break into "bite sized chunks" that admins/members have some chance to spit out.

@maiseu Good point. I have oft given thought to the potential for abuse via this vector. Have relied on members/helpers to alert mods/admins in a timely manner via either chat/pm or maybe even a post alerting the community at large. My stuff is mostly hole in the wall and mayhaps I've been lucky. But with all the cyber warfare/terrorism endeavoring to exploit/leverage social medial platforms of all stripes and sizes I am about as nervous as a long tailed cat in a room full of rockin' chairs and know it is only a matter of time.

Be all that as it may, I am unsure what can additionally be done beyond the above: cuz anything will result in need for timely intervention by mods and/or admins while also potentially opening up yet another vector for abuse: war game flagging amongst community members against others they may disagree with. Sticky wickets.

Relatedly, there is the "Spam Be Gone" plugin, or some such name, that facilitates incorporating the Stop Forum Spam project api keys. Recommended by /me. And free. Yippie yi-yo kiyah!!

@yariplus said in Plugin development 2021 updated - environment and dev workflow - request:

IntelliJ page says only the Ultimate version supports node.

Bummer.

fwiw; Emacs has a nodejs mode. The advent of Clojure several years back resulted in lots of Windows folks installing Emacs to get access to all its development goodies. Hence, there's lot of Emacs on Windows for dev/ide stuff on e.g. Stack Exchange and such. Commercial stuff has probably since caught up. And likely surpassed, if that's what you're used to. Like all powerful tooling, Emacs doe have its learning curve. But it is free and pretty much does any and everything.