InfBoumcyCastle
SearXNG Perfect A+ Grade Setup?
chatgpt also said:
Why SecurityHeaders.com or Observatory might still complain:
302 Redirect is the first response
The headers you see are returned after the redirect, but some tools test the initial response.
Tools like securityheaders.com or observatory.mozilla.org may only scan the initial 302 response, not the final destination.
If the redirect response is missing headers, you get a lower score.
Redirect from Traefik to Authentik
The redirect (302 with location: /flows/...) is likely coming before full auth headers are applied.
Some headers may not be attached to that 302 response depending on your middleware chain and router configuration
-> so that makes sense, i guess?
11 replies
SearXNG Perfect A+ Grade Setup?
From the other post with crowdsec I know / assume you are on tipi v4.
My config on GitHub is still from v3.x
There are changes in v4 that need changes in my GitHub user-config as well, which is not documented yet.
One of the things will be, that the v3 to v4 migration did not move the user customized traefik config, but left in in migration-backup. Chances are, you are not applying a custom traefik config atm.
11 replies
- crowdsec-bouncer@file not working!
while i am not sure what are you are saying or even what version etc you are on both on tipis side or anything else - i assume you migrated to the latest version of tipi?
if so crowdsec wont work anymore.
this has to do with the fact that the dynamic config just assumes that there is only one service that needs access to the externa network - and that this is the service with the traefik rules.
for the 3 services of crowdsec it is that all 3 need access to the external network.
so atm you have to come up with a user-config. i myself have find a solution...
@Nicolas @Stavros @Lancelot this is a know problem with those kind of apps - crowdsec for that reason has udates deactivated atm - a solution here would be nice
7 replies
Crowdsec won't create Bouncer API Key
yeah - i am giving it another week before i make the jump. will read through the documentation regarding that. maybe ist as "easy" as instaling the app again from the store and moving data from "migrated" to that. but i dont know if this is an option even
7 replies
Runtipi default apps and data install directory questions
at default tipi is installed in the dir from that the install script is called - which most likely is the home dir. this includes the data dir app-data as well.
please post the output of
./runtipi-cli debug
here.7 replies
Linkwarden + Authentik auth error
@Skullky @Stavros
https://github.com/runtipi/runtipi-appstore/blob/f8d18f65d3048535bcca9c7ef42a0b8c6141f428/apps/authentik/docker-compose.json#L5
https://github.com/runtipi/runtipi-appstore/blob/f8d18f65d3048535bcca9c7ef42a0b8c6141f428/apps/authentik/docker-compose.json#L37
16 replies