So if I understand correctly:

1. Not security related.
2. But yet there seems to be some need to "protect the login page".
3. So I need to tell my browser to allow yet one more 3rd party script that you may trust but I may not.
4. And then I need to engage in bunches of time consuming selecting this image and that and the other image clickery every time I login?

I do not use any of the big "social media" whizzbang thangs and may be 'out of touch' but this seems rather intrusive. Is this the new normal?

@julian Only now it is enforced. Some security necessity? While hCaptcha is preferable to reCapcha I am opposed to third party scripts in general.

@julian And I thought perhaps categories...

@julian said in MongoDB 6.X at installation: (emphasis added)

As it turns out, people who write databases have a really vested interest in making the database really fast

I was a MySQL enthusiast prior to its open source licensing days, using it for personal, education projects and hoping for that day. Fast forward a few decades and imho Monty and Crew lost their way. I had always been interested in PostgreSQL but mostly using it in lab settings. MySQL selling to Sun Microsystems tripped some yellow flags. Oracle bailing out Sun Microsystems tripped three red flags so I have been favoring my old friend PostgreSQL ever since.

Take a gander at the 'who' for each respective project. Behavioral Biologists and Cultural Anthropologist enthusiasts may observe that the 'Developer Culture' is very niche specific.

@NodeHam said in Google constantly complains about nodebb forums:

organically is all we have

Mayhaps we should elaborate on our definitiion(s) for 'organically'?

I have found this term can be used as a catch-all and mean different things to different world views.

Very interesting. Indeed. Indubitably, even.

I, and many others, feel your pain. I boycott evil these days the best I am able. My two bit opinion, ymmv.

Matomo is one possible option Google Analytics alternative that protects your data and your customers' privacy

Works well. Maybe non trivial to set up for non systems admin types but there are SaaS options as well. Iirc, they also offer free trials so you can test drive w/o incurring monetary costs.

Does not solve your specific problem but at least one alternative to avoid having the problem in the first place. Managing self hosted Matomo may be an even larger "problem" for you depending on background and available resources. It was not for me and I've never looked back.

Such should be available from your web server logs, e.g. /var/log/nginx/access.log

From within NodeBB ACP, you may access error logs, but reproducing everything that comes in would be redundant and more efficiently handled by the web server.

You may, however, enable IP logging for individual posts NodeBB ACP side if you are simply trying to track "bad actors" for black listing purposes. ACP->settings/post#ip-tracking

HTH- Have fun!

Nice one Julian.

Cheers!

Heh, I just noted this as well:

@phenomlab I seem to recall that there is/was? It has been a while since I looked though and am unable to locate the link at present.

@ayyilmaz I cannot speak for the NodeBB folks but I suspect many of us are looking to transition off of MongoDB over to PostgreSQL since mongo is no longer released under a OSI approved license. To be fair, an argument may be made that the license change still allows free use for non hosting as service types of deployments and hence no big deal for forum operators. Of course the rebuttal to that argument is that there is no assurance Mongo will not take additional measures to further restrict their license in the future. The old "Screw me once, shame on you. Screw me twice, shame on me.".

tl;dr-- I will likely be using PostgreSQL moving forward and thus not bothered to test recent versions of MongoDB. If it works for you and you are okay with mongo's licensing then maybe stick with what you know?

@DownPW said in Chat in main page:

Just add basic moderation functions and it would be perfect.

How then to still be protecting the online privacy of chat users?

I view "chat", at least w.r.t. forum integration, as an extra for those times when a public discussion is inappropriate. Otherwise, just post it up. If you need discussions in real time, there are many, many other options, all of which I view as being outside the scope of forum software.

@phenomlab said in Chat in main page:

If only everything in life was as fair as @DownPW

@julian said in Chat in main page:

... and then there's the whole idea of "doing one thing and doing it well". You can argue that NodeBB does a lot of things, but it does one thing really well, and that's being a forum. Everything else is gravy, but also doesn't mean that it'd be good enough to compete with other dedicated products.

Let us call this what it is: The ever and ongoing "religious war" between "The Unix Way" and "The M$ Way". History has shown that the former produces superior software whilst the latter produces monoliths full of bugs and security holes of the day. History has also shown, however, that you can make a lot of megabucks catering to the latter. But then the rest of the community will be suffering through increasingly insufferable software. Until we do not because we've moved onto the latest and greatest forum software that does forums well. So I guess the NodeBB principals get to choose their poison on this one, as no matter which path they choose, some subpopulation is going to be unhappy campers.

My two cents worth.

@Rektalizer Evidently you have a mish mash of "names" here:

1. irrisuite.ru - as noted above, this one resolves to IP address 95.31.35.62

2. www.irrisuite.ru -- this one also resolves to IP address 95.31.35.62

3. forum.irrisuite.ru -- this one resolves to ... same as before.

Which are you actually using? If you intend to use more than one of the above then which will be your nodebb forums URL?

Or is it your intention to have ALL of the above point to your nodebb forums? Note that this can create issues on down the road if, for e.g., you decide to "spin off" www for e.g. a blog or other purposes.

As for your nginx logs immediately up post, have you adjusted your nginx server_name config to jive with your nodebb config.json yet?

@PitaJ said in Issues opening NodeBB via canonical URL in docker-compose network:

Is the DNS set up?

1. Yes. Below is the quickie check I did yesterday prior to my post.

% drill irrisuite.ru
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 15337
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; irrisuite.ru.	IN	A

;; ANSWER SECTION:
irrisuite.ru.	9359	IN	A	95.31.35.62

2. And No. I neglected to check the subdomain. Which of course is essential given their NodeBB instance's canonical URL.

% drill forum.irrisuite.ru  
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 58304
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 
;; QUESTION SECTION:
;; forum.irrisuite.ru.	IN	A

;; ANSWER SECTION:

;; AUTHORITY SECTION:
irrisuite.ru.	3600	IN	SOA	ns1.reg.ru. hostmaster.ns1.reg.ru. 1657192234 14400 3600 604800 10800

@Rektalizer You NEED at least an "A" record for the forum subdomain (CNAME record pointing to irrisuite.ru could also work, depending on your set up.).

3. It would also behoove you to create PTR entry whilst you are at it:

% drill -x 95.31.35.62    
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 2132
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; 62.35.31.95.in-addr.arpa.	IN	PTR

;; ANSWER SECTION:
62.35.31.95.in-addr.arpa.	3243	IN	PTR	95-31-35-62.broadband.corbina.ru.

Although this may not be feasible if you are on a shared host w/other "virtual hosts" using that IP address. But, if so, you still have a pretty good chance of claiming it since nobody else has as of yet.

This seems to be broadband. Which may be indicative of a "residential" internet connection. Which may NOT be a static IP address. Perchance are you using dynamic dns config? If not, you may want to investigate that since you may not get the same IP address the next time something gets rebooted.

Edit: To be "pendantic": Of course OP could also change their config.json URL to irrisuite.ru but I get the sense they're utilizing the subdomain for a reason.

@Rektalizer I am not a docker fan but it seems to me that your nginx config should contain a server_name parameter somewhere w/in your server {... } stanza. Is it set?

I also suggest setting your bind_address directive to 127.0.0.1 in your nodebb config.json.

Have fun!

@Varun-Ganesh-D Define "Installed". Did you rebuild and restart nodebb afterwards?

Also, what version of nodebb? I presume 2.x. In which case I refer you here:

https://github.com/yariplus/nodebb-plugin-newsletter/issues/33

Good luck.

@julian Cool. Looks like you've a "Solarized Dark" happening labeled as "Solar". How about Solarize Light? Should be fairly trivial to flip a few bits and include "Solarized Light".

Zenburn might be another popular one to have on tap?

@rongcuid Iirc, mangolassi.it, which sports a fairly large user base, just uses mongodb solo, no redis. Community Rep @scottalanmiller runs that site. He does not pop in here very often anymore but would be another good one to query w.r.t. db experiences, and indeed, NodeBB experiences generally. Very seasoned and knowledgeable guy.

Re: PostgreSQL Backend

Now that performance concerns 'twixt mongo and postgres seem minimal (I need to test more to confirm) they can take a back seat to other important concerns.

I personally have issues with MongoDB, Inc.'s licensing gamesmanship. Typical of too many modern day FOSS (Fake Open Source Software) project. I favor ROSS (Real Open Source Software) from folks like @julian et.al. that provides "the full monty" to anyone willing and able to use it rather than some feature crippled "community" version whose primary purpose is free beta testing.

Hence, in all probability I will be using PostgreSQL for future deployments.