Okay, so disabling HSTS and flushing my browser cache again brought remote images back.
It's obvious that I need to crack into the ideal way to configure these things for the Fediverse, might have to replicate how some of my other Fediverse platforms are set up on the Nginx side.
administrators
Posts
-
CORS issue on federated Thumbnails -
CORS issue on federated ThumbnailsHmm, it looks like now we're having problems on our end with remote images from other platforms:
Maybe our CORS settings were too aggressive?
Getting a lot of error messages that look like this now:
Failed to load ‘https://community.nodebb.org/assets/uploads/profile/uid-2/2-profileavatar-1738544541106.jpeg’. A ServiceWorker passed a promise to FetchEvent.respondWith() that rejected with ‘TypeError: NetworkError when attempting to fetch resource.’.
-
CORS issue on federated ThumbnailsOkay, so one slightly weird thing that comes up: certain categories seem to be fetching the wrong image URL when attempting to lookup a forum category.
Here's an example for
fediverse@forum.wedistribute.org
- URL that should be loaded:
https://forum.wedistribute.org/assets/uploads/category/category-5.png
- URL that gets loaded remotely:
https://forum.wedistribute.org/assets/uploads/category/category-5-icon.png
Note: I'm pretty sure this category in particular was created during our initial forum setup, which was the
v4.0.0
release. I think category images were handled slightly different then?@julian@community.nodebb.org Does NodeBB offer a mechanism for federating out updated image thumbnails for categories? It's pretty common for Fediverse platforms to update user avatars when they get changed, for example.
- URL that should be loaded:
-
CORS issue on federated ThumbnailsOkay, I think I figured it out! It looks like my browser cache was just aggressively saving thumbnails. A quick flush of my browser cache seems to indicate that everything is okay.
-
CORS issue on federated ThumbnailsHey NodeBB community,
First off, we're really loving using NodeBB for our community forums. Federation for the most part works great, and the experience is very, very polished!
We hit a weird snag after upgrading to
v4.4.1
today, and I'm trying to decipher whether this is a bug, or simply a user error.TL;DR
Thumbnails uploaded to our forum for category topics and user accounts appear to be broken when viewed from other instances. For example, trying to view
@fedimusic@forum.wedistribute.org
in Akkoma or another piece of Fediverse software appears to fetch an intact profile with a broken image, like so:I get the resulting error in the inspector when viewing this page:
The resource at “https://forum.wedistribute.org/assets/uploads/category/category-18.png” was blocked due to its Cross-Origin-Resource-Policy header (or lack thereof). See https://developer.mozilla.org/docs/Web/HTTP/Cross-Origin_Resource_Policy_(CORP)#
What's really weird about this is that not all images are affected in the same way.User avatars and forum category thumbs that existed prior to a certain upgrade (not sure which) seem to federate just fine.
CORS Config
This is the config I currently have in NodeBB, maybe I'm missing something? Just trying to suss out whether this is something I did, or if perhaps this is a bug.
- Access Control Origin:
*
- Access-Control-Allow-Credentials:
true
- Access-Control-Allow-Methods:
GET, POST, OPTIONS
- Access-Control-Allow-Headers:
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
- Cross-Origin-Embedder-Policy:
enabled
- Cross-Origin-Opener-Policy:
same-origin
- Cross-Origin-Resource-Policy:
cross-origin
- Permissions-Policy:
blank
- Enabled HSTS (recommended):
true
Let me know if there's something I need to account for! I just want to ensure that images load properly from other instances / platforms that we're federating with!
- Access Control Origin:
-
Testing federation of new topic with We Distribute@icaria36@the.socialmusic.network One thing I've noticed so far: it looks like posts created before you enabled federation can't be fetched? I've tested with both NodeBB and Lemmy.
This thread seems to work okay.
-
Testing federation of new topic with We DistributeIt does actually come through, but for some reason I have to manually move it from a personal remote subscription. I'll keep plugging away at this side.
-
Current Fediverse resources for MusiciansAlthough the amazing RadioFreeFedi is no longer with us, it laid the foundation for a number of interesting projects within the Fedi Music space that are worth talking about and recognizing. If anyone has additional recommendations, please let me know, and I'll add them to the list!
Here's a quick overview of the efforts I currently know about:
Music / Audio Platforms
- FairCamp - Simon Repp's static site generator for musicians. Open source, just throw some music in there and get set up!
- Bandwagon - A fantastic emerging BandCamp alternative for the Fediverse. Still kind of early days, but the ability to sell music is on the roadmap.
- Castopod - More of a podcast management system, but it's ActivityPub-enabled.
- Funkwhale - still active and kicking after a long hiatus, resurgence, and development cycle. Apparently, we're on the cusp of Funkwhale 2.0 coming out.
- Mirlo - A small indie music store with some Fediverse musicians on it. It's tiny, but pretty polished, and does appear to allow musicians to sell their music on there. The project has mentioned ActivityPub experimentation in the past.
Internet Radio / Programs
- The Indie Beat FM - Was slightly controversial upon launch, due to not really providing donor links as part of artist attribution. Still, it's one of the main streaming partners integrated with Bandwagon.
- Audio Interface - An online underground music show hub based in the Fediverse. There's quite a few different programs!
- Not What I Call Bonkwave Radio - A radio stream powered by The Indie Beat Radio for the Bonkwave community.
Events
- Fedivision - A widely beloved alternative to Eurovision, where community members team up and compete.
Community Resources
- IndieArt Support - Basically, the music directory component from RadioFreeFedi, with a significantly large list of musicians, their social handles, genres, and where to find their works.
- NHAM - "Network of Hope and Association in Music", basically kind of a music blog that shares playlists and music reviews.
Netlabels
- Bonk Knob records - The origin of the idiosyncratic genre "Bonkwave", of which its many music compilations try to define what Bonkwave is not.
-
Testing Federationhey @icaria36@the.socialmusic.network, we just upgraded our NodeBB, it looks like everything should be working now!
-
Testing Federation@icaria36@the.socialmusic.network
Is this bug report related to this issue?
I think it might be, that's what I'm hoping to test. NodeBB upstream has a fix for this; once they make a new release, we'll give it a shot.
I suspect the fix will be: once we pull in this change, we'll be able to rescind the pending follow and resend it.
Also, you say that federation with https://socialhub.activitypub.rocks/ (also a Discourse) works. Which We Distribute category is federating with which SocialHub category?
Just checked this, we're following their ActivityPub category specifically. For some reason, their Actor shows up as
https://socialhub.activitypub.rocks/ap/actor/e9a2dbe246a6064329b37247d620bab1