@splitshockvirus bruh is there any way to disable search for anonymous visitors to a mastodon instances or do you just live with it enabled forever
@kirby You mean text search or disable the bar entirely?
@splitshockvirus the post searching, yes the bar i think, and if theres an api endpoint for it i want it restricted
Well you could restrict it by not enabling search to begin with. That's what I opted for because most people don't like indexing for some reason. You need to have elastic search installed in order for it to work in the first place.
I don't know if there is an endpoint. I never looked further into it because I only use it to search accounts.
@splitshockvirus oh the post searching doesnt work out of the box lol
@splitshockvirus well is there a way to disable fetching remote users for anonymous visitors?
You could just be a savage and rip out the ruby and js code that renders the search bar to begin with, and then recompile.
You need to setup something to index the posts otherwise there is nothing for the search to look for.
@kirby Skill issue. I forked Mastodon before Akkoma and Calckey even existed.
@splitshockvirus i don't want post searching on here anyway lol
If you're actually schizo about it, turning off the frontend entirely and just using mastoapi with whatever clients is a savage way to run an instance.
You basically BTFO of any theoretical vulnerabilities that could exist. Also it raises the bar for fedicock no lifes trying to recon your instance.
@splitshockvirus@mstdn.starnix.network @kirby@mashtodon.alterracloud.com [mashtodon.alterracloud.com] I will do this when its finally time.
Do you know if it is even possible to do in pisskey?
@splitshockvirus@mstdn.starnix.network @dcc@annihilation.social @kirby@mashtodon.alterracloud.com [mashtodon.alterracloud.com] I am still looking for a good pisskey fork
@dcc@annihilation.social @splitshockvirus@mstdn.starnix.network @kirby@mashtodon.alterracloud.com [mashtodon.alterracloud.com] I use milktea which is literally the only native misskey client.
Kaiteki also exist but its barely functional when it does work.
The issue is that last I remember they all used the web client to get authorization
@kirby@lab.nyanide.com @kirby@mashtodon.alterracloud.com
Many such cases. You love to see it actually.
@kirby@lab.nyanide.com @dcc @kirby@mashtodon.alterracloud.com
You didn't edit any of the ruby did you?
@kirby@lab.nyanide.com @dcc @kirby@mashtodon.alterracloud.com
ctrl+shift+r
and then install multiple web browsers so you can sanity check as well as test what your users will experience.
Welcome to webdev, you're in hell now.