#development
1 messages ยท Page 277 of 1
yeah right
So his case still wouldnโt work
do you guys know any open source bots like double counter?
verification on site and avoiding vpns etc
just write your own
the thing is i need it for my community and i dont really have the time to do so
many vpns have a distinctive signature
Since this includes more than the ip
Discord's leading CAPTCHA verification bot. Perfect for NFT, Crypto, and Web3 communities. Anti-raid and anti-phishing links.
oh wait
you said OSS
nvm
yeah some kids are getting on my nerves
they have a bunch of tokens and join the server like 20 times
after getting banned each time
and i REALLY dont want to use double counter
I am using C# right, and I have since learned of using multiple projects in one solution.
I am wondering how configuration works amongst the different projects (aka class libraries) from the "main" project
what do you want to know
How do I make configuration work across the projects
what are you configuring? do you want to link class libs to your parent project
I need to be able to access my db config variables in my Database class library project
ah yeah
you want to use references. dotnet reference

class libs should always depend to the main project, main to class libs almost never
Right
So how do they handle configs then?
Surely they dont hardcode it in
I guess they use a secrets manager?
like doppler
I don't know how your project looks like nor what you're trying to do
if you depend on something in the main project, consider throwing it out into another class lib
Well right now im just wondering how I handle configuration
Cause I definitely will be needing to use constants in multiple class libraries
so have a common project
like a Config class library?
dude, what are you trying to do?
are you in an asp.net app looking to configure it? or are you trying to implement a configuration system from sctrach
Because I am answering the best I can
can't you just use something like a yaml/.env/.conf file
I am indeed in an ASP.NET app
there's built in configuration for asp.net
Learn how to use the Configuration API to configure AppSettings in an ASP.NET Core app.
so you already have a config, appsettings.json
๐
there's an example in the doc how to use it with IConfiguration, all you have to do is inject it
Gotcha thanks
if you want to store the connection string (username/pw) to the database in the config, I'd rather use environment variables btw
How come?
just overall better practice iirc
Does it not get turned into env variables when building?
Do you have to keep the appsettings file with the compiled binary?
no
Gotcha
Create a ProjectName.Shared project (class library) that's built with all the other projects, you can add it as a dependency like both my web and agent share the Shared project
Right click on a project to configure dependency
Ima just use env variables
That would be annoying and you would have to have them in your github (unless ignored) and also when you publish them it wont have it unless you use .env.
The shared project class can have static methods and extension that can be used.
Would this not be the same problem I mentioned earlier of circular deps?
In what way? like being built, debugging or?
As in, like lets say Project.Database depends on Project.Shared and then Project.Main depends on Project.Database and Project.Shared
Yea that would be fine
Really?
Im used to that being a circular dep

Also isn't hardcoding the variables bad practice
Yea you can do circular deps you just need to add a reference/dependency to it
Gotcha
Updated Dev Space v1.0.23 with the root/main url now showing my teams now ๐
I plan to make it a more dynamic home page like how Azure lists recent and pinned resources and other information/stats
Its been 6 hours. Just got it back online. The test bot and the push bot is now online!
best archive format ๐ฅ
-rw-r--r-- 1 root root 865392640 Apr 17 02:10 a.tar
-rw-r--r-- 1 root root 760800076 Apr 17 02:12 a.ddup.gz
-rw-r--r-- 1 root root 760818322 Apr 17 02:09 a.tar.gz
-rw-r--r-- 1 root root 761267561 Apr 17 02:14 a.zip```
ar -C g
Finished `release` profile [optimized] target(s) in 0.08s
Running `target/release/ddup-bak decode a.ddup g`
File count: 560
real 0m1.574s
user 0m0.045s
sys 0m1.418s
root@remotedev:~/projects/0x7d8/ddup-bak# time tar -xf a.tar -C g
real 0m1.512s
user 0m0.013s
sys 0m1.437s
root@remotedev:~/projects/0x7d8/ddup-bak# ```
When your too lazy to make a better format. But needed mega debugging initially
Thats fine my bot logs all messages 3 time.s
It amazes me how stupidly easy it is to implement email & password authentication in asp.net
Asp.net identity is pretty nice to use yea, oauth stuff a bit more annoying depending on service
Yea
I mean, I plan on handling oauth2 myself without identity since its not important
Since all ima use it for is linking their discord account to their account if they want to
I think it's like gitlab oauth apps only allow 1 redirect url ;-;
So no real need to make use of Identity for that, just make some redirects and api calls ezpz
I notice Identity incorporates 2FA though thats rather interesting
I thought that was something I was going to have to use a separate lib for, or do it myself
So its nice knowing its included
Identity is nice for oauth as well
@prime cliff do you use supabase at all
Indeed it is
or do you do your own auth?
You can kinda make a hybrid between built in and custom
I just don't have a need for using Identity with oauth
All I will do with oauth is linking their discord account to their user account
So its simple to do myself
I use authentik for my auth system really nice setup and dynamic policies
I usually use Zitadel for my auth system
ah
but digital oceans a bitch and wont let me use SMTP protocols

Having a proper auth system would be so much nicer 
just trying to pick an auth db
cause honestly I dont wanna roll my own auth for sra
lmao
Authentik looks legit actually
How is it's response times for support?
What I use currently which is Zitadel, while they are helpful it can take a week to get a response back
๐
Sup luke
henlo Papi
ayo?
Authentik uses python syntax for custom policies so you can do stuff like this to get request data and block it with a custom message.
blocked_domains = ["example.net", "example.com"]
current_domain = request.context["prompt_data"]["email"].split("@")[1].lower()
if current_domain == 'fluxpoint.dev':
ak_message("Nice try :)")
return False
if current_domain in blocked_domains:
ak_message("This email is domain is blocked.")
return False
return True```
im just trying to find the easiest way to roll auth
so I can work on stripe shit
Cause what I mainly need to do for one of my projects is if the email being used to register isn't in a "allowed" list, then I need to essentially deny the request
cause stripe stuff is and always will be a bitch
tho theo's implementation is actually gonna save me
I have my own can of worms with stripe that I wanted to chew their asses out for
Meanwhile paypals api 
Bunch of different v2/v3 endpoints with weird brand settings and context, dev portal that auto logs out after a few mins and really weird live restrictions
lmao that tagline
ITS TRUE THO
Too much software these days that makes the devs go mad
but TLDR; use KV and keep stripe shit in one place, then sync between services
Stripe makes walking into fire seem like a good idea
Wait redis as a KV isnt that temp data not....
no?
it has persistence
not necessarily
KeyDB is just a fork of redis
using redis for persistence seems dumb tho no?
I have a serious backlog of things I need to do for the Discord libs I maintain. I've only been focusing on the REST and gateway libs and I need to implement better rate limit handling for the REST portion. Then I need to do a total rewrite of the cache lib because it's way outdated
but better
Hu really interesting
topstats uses redis
with persistence
its gonna use KeyDB for stripe stuff prolly
purely for speed
KeyDB was made by snapchat btw :^)
Oh 250 event types with no consitency and not in order my fav
Why would stripe make it easy for you
Whats the use case of a rigid cache from redis if it brands itself as a fast cache? Maybe if the cache is really expensive to rebuild, but I'm yet to run into any real world examples
its not their problem
Ima check out Authentik
Thank you for notifying me of it
it's purely so when we reboot we dont have to fetch all of the bot data between it
well used to be
seems like a better option than zitadel
theres no cache apart from search caching on topstats rn
Sounds a bit like this software that's $100 per-user 
Just raw data responses no descriptions and out of place naming schemes
very consistent
You:
"Small change. Totally safe. Straight to production."
The bot (seconds later):
Traceback (most chaotic line you've ever seen)
"btw I banned 300 users. Oops."
You:
โWHO WROTE THIS?!โ
(Also you, 15 minutes ago)
Me and GPT were joking about how i started with no checks. Just hardcoaded everything w no backups
And now im dying laughing
theo - opinion invalid
i hate theo with a passion
I hate most programming YouTubers
theo is just egotistical
They all are
literally needs to get a life
yeah but he is like next level
his tweets are so funny cuz like
no one cares
honestly
I don't like the way you simply just shout his opinion is invalid

I don't agree with every take he has, sure
but the stripe stuff is genuinely great, he did an over hour long video on it
saying someones opinion is invalid purely because you dislike them or you disagree with them frequently is immature
I should point out, I disagree with most of his takes. I still respect the work he does in the space. Even more so when it comes to business ettiquette and also how he does public analysis of a lot of stuff. He's done a lot of good
Your welcome to have a opinion But atleast be chill about it. Back it up with some evidence and instead of just "I dont like theo" be like "Eh theo is kinda not good"
Tbf Theo can come off as very hyper/pushy about his points
he's also very opinionated at times
the research he does is still decent tho
Thats why i said back it up. THen its more of a open descussion
Fair
Yea well I don't like the way Villager Nuke talks about Villagers
one of my main issues about him is that he constantly tries to instigate issues in the dev community so he looks right
for example, someone made a t4 stack (called that because its the top 4 performing libraries for react)
and he instantly sent his community to attack them saying its a copy of t3 and that it was 'stealing from his likeness'
when in reality, it was just someone making a boilerplate using top react libraries
when called out for it, he dug through the creators posts to try and find dirt against him
and trying to ruin his rep
It sounds just like he has a opposing opinion he shares.
he also strongly dislikes js, so what does he do? open issues on popular repos saying please rewrite in ts and throwing a hissy fit when they say no
Average adult dev.
then someone cancelled their t3 sub saying it was to expensive - what does he do? make it so you can't cancel for the price anymore
he's just repeatedly toxic in the dev community, all he does is complain and gives pretty much the entire js/ts community a bad name
i used to like him but literally all he does is cause problems and act like a saviour trying to fix them
Freal tho. So waht that he does. is just disagrees with alot. I dont see a issue with it. He wants to disagree just ignore him.
I haven't really seen much of that
thought yea I get that sometimes he's pushy with his opinions
he still posts some cool yt stuff
I stay away from twitter for the exact reason you show
i wouldn't hate on him as much if he wasn't so pushy and toxic towards people
Dev twitter space has and always will be a massive pissing contest, because twitter
Drama ain't worth troubling myself about honestly
I care more about the opinions and how things do what they do
so I watch his videos about cool tech and leave it at that
Don't even watch his streams lol
I understand this point btw
but I tend to stay the hell out of the way of large dev people for this reason
pretty sure he also deflected peoples issues with him and blamed it all on autism or smth
anyways
that I heard yea
he seems somewhat okay now
probably because Primeagen and others have told him to STFU multiple times
i dont watch his content anymore, theres some smaller creators i tend to watch because they have a smaller community thats kinder lul
yea fair
I've got an idea (well, not just an idea, it's built) for a discord bot that I don't think I've seen done at all but would be useful to servers related to a game / games. But it's kinda easy to replicate.
What do I do? I know I can't stop people to replicate a similar sort of bot, I'm just racking my head for features that would be hard to replicate. Or do I just not bother with that and solely focus on trying to get users
market yourself as the only bot in the market for that niche
if people make their own, so be it - make yours the stand out one that people want to use
continue building on that idea and keep yours up to date
How does one market a discord bot other than bot list sites and maybe a simple website
For anything else I'd probably think social media, but when's the last time you saw a video or a post on social media about a discord bot and then adding that bot to servers you own?
This part is a bit tough because I'm not sure what else to add other than the few things I've got jotted down. After that I'm not sure what's left, it'll basically be done
They probably meant try to keep up with what Discord has to offer like some people didn't hop on the interaction train. When buttons came out, that was huge instead of using reactions and having to perform a lot of permission checks
Right, yeah I can do that
And that can be another point of talking like some people give up on their bot with the mentality if it aint broke dont fix it
Should I wait till interactions v2 then ๐ค
Always search for ways to improve user experience
wtf is interactions v2. Do you mean components v2? That's coming out very soon
Probably got muddled with the naming but yeah lol
Most libs already have the support for it for when the gate does get lifted
I heard it got delayed
Rn it's available in a special server lib devs were let into
Yeah I got a few screenshots
I really would've liked if they updated modals too
We can only hope. Dv8 said they're trying to match stuff with GDC, but they're aiming for an April/May release
Which is fair. They just dropped their new game overlay
Honestly, cv2 isn't that big of a change. It's quite simple to translate a content/embed workflow into cv2
Only thing I can remember is buttons being within the embedded message but I'm sure there was a few other things
I'd start while you're ahead and you can already build off cv2 and if you need to test early, can add a quick intermediary to translate back to content/embeds until the gate is lifted
Some examples I made
Theres some other cool stuff like dividers and spacers
You still need permission checks btw because people can spoof interaction requests
So yeah obviously you have to verify the interaction is from discord if you're using the webhook, but over the gateway, you don't have to. By permissions, I meant Discord permissions like embed content or send messages. If you receive an interaction, you're basically guaranteed to be able to respond with whatever you want save for the case where the interaction is expired or somehow gets deleted before you can respond
Not that i mean user permissions and user checks
Say if you have an ephemeral message button that is only shown on a /dev interaction command you can run the button itself needs those checks too you can't rely on client data
Message you can't see
Button [ id dev-button ]
A user can spoof a request with that interaction id
It's like hiding you api routes in the js code of a website but they are not secure
Oh. I see what you're saying. So I'm rather fortunate that I built a system where every button is assigned a unique ID never reused and I encode special route info in the custom id like which worker the button came from. Theoretically, someone could engineer an attack on my bot assuming they know the unique ID and the required data
can always fix that by signing it with a private key lol
They'd also have to learn my special JSON encoder format that isn't really JSON
I call it ASON
I would like to know
Would recommend
what the acronym for that is
Sure one sec
One of the big Discord bots did this where a dev page for Discord servers could be enabled client side and then run with unprotected endpoints kek
ah yes, mee6 right
No
surprising
Amanda's Surely On Narcotics
ik mee6's user endpoint and servers endpoint used to be unauthenticated
lmao
I think this actually isn't as stupid as some people might believe
whats the max length of a custom-id
encoding data into the button custom id was something I really needed and being able to stuff as much data as possible while still being able to get the data back without some stupidly complex parser was necessary
100 characters
yea thats sweet
really ASON is just slimmer JSON
actually
I should know that
I ran into the custom id limit
with @ruby marsh
lmao
Lmao
A vulnerability was found in the Discord bot, Captcha.bot. And I hacked into the bot and gave myself admin on a Discord server. But when I told the bot owner/developer about this, he said...
Wow I'm a tease. But yessir, it's another video where I talk about the abhorrent security of Discord bots and how easily they can be hacked. And in this ca...
Ah captcha bot
@lament rock
this is how I do it

yes it's discord.js
it's also a 1 file bot

My bot.
I mean hey if it isn't like a big thing use whatever lib you want
true
but I have very choice words if you want to scale
Js is decent. Java is like OMG. Py is like eh.
tbf I wouldnt use discord.js on its own to scale
Rust says "FCK YOU"
Should totally look into SnowTransfer and CloudStorm :)
โค๏ธโ๐ฅ would be supporting me
If i can ever get intents ill have to start looking into this

Devs need to learn security or never make public projects
Eh
cloudstorm looks cool
Thanks bestie
Was probably gonna use a zlib flavor Tim made
Tim already helped with the socket code
fast-zlib?
Yeah
iirc it didnt matter which zlib I used
I was handling 2-3k events/s
and it just slowed down the mem leak
js and compression dont like eachother
At my bot's peak, I was in 10k servers handling an ungodly amount of message creates per second and never had issues, but I'm yet to hit that peak back since I deleted the bot (bad decision. lost my early dev badge)
Ah I turned that shit off after I did an investigation why discord.js was eating all my memory
djs v11 was whack on api v6
discord.js should work fine on a KV store cache tbh
it's just making sure nothing bad breaks
Only thing I can think of that would cause issues is the fact that a lot of stuff would now need to become async
hm?
this is modifying the internals
cant you tell discord.js to use different cache stores?
Yup I assumed that it was nuking the Collection caches
Not that im aware of
Really I've only seen 1 lib allow custom cache impls and thats RainCache
But I need to update that
i'll worry about that when SRA is at a point I can lol
Still a raw api enjoyer
Would recommend. Makes things a lot less convoluted when you're in control of basically everything
I did for a while but found it too annoying in the end
Api + Insomnia client 
I might try it again in the future
I stopped using insomnia after kong ruined it when they bought it
Went to the next thing the founder made
YAAK
Yea they did ruin it but it still works best over postman
Insomnia without the cloud bs
Look at Yaak
Will do bit too purply though
I might actually create a http client myself tbh especially since insomnia really dosen't like self certs in a few cases especially websockets despite having an option to ignore it or being trusted by windows cert store
I had intended on making an HTTP/2 and probably a Quic client and server impl for js
Since there isn't much if anything on that end
Once I finish my backlog of other things
Just need to learn how to better work with Buffers
Should be a fun project. Totally won't get any CVEs :)
This looks interesting
So its similar to postman without the annoying bs?
Itโs made by the original founder of insomnia
oh neat
Before he sold to kong
Thereโs actually a blog post about mistakes he made with insomnia
lol
And what he wants to do to change it
Interesting
I am seeing a lot new tech in the industry
Looks sick
Finally good to see people making valid improvements
Tried adding my AWS ec2 to devspace and its not discoverable
I opened that port on the firewall
You leaked your ip and key btw
Maybe the same situation with DO ports not being allowed at a specific range maybe try doing the ping thing
A curl https://1.1.1.1:5555/discover with the agent ip
Might warn about self cert
Try with /discover
Still nothing
Wait what
Ok yea something is blocking it in AWS can't open it in browser either
Dont you need to set AWS to allow those ports with a security rule or something blocking inbound
Also dont AWS services get their own service url you can use? Based on its name?
Learn how to connect to an EC2 instance using EC2 Instance Connect Endpoint.
Yea they do ec2-xx-xx-xx-xx.compute-1.amazonaws.com:5555
this reminds me
I need to unban amazon from SRA

banning ASN's was not my best moment
you banned amazon?
Damn
AWS blows, only using it cause free vps for a month for a whole year
just using it for auth server 
Try setting the server up with the e2 url since it can see the server now
like this?

๐ค
You should clear the key in Data/Config.json and restart the agent btw to regenerate it just to be safe
Should be instant unless the delay is something blocking it and then that timeout
I can test in afternoon later
Can I please just be dumb backend programmer
I hate setting up anything

I thought this would be quick and simple
Well not in these kinds of environments there's always an edge case xD
You already know that as a dev how hard it is to support a ton of stuff with various requirements and annoying issues xD
Yup
Great
I rebooted my instance and can't connect to it
PROBABLY CAUSE PORT 22 ISN"T EXPOSED GOD DAMNIT

Fuck I hate my life
I always forget to expose port 22 when I enable the firewall
this is why I setup a wireguard vpn
that can access any machine on my /28 subnet
lmao
gone are the days of opening port 22
Should have used hamachi 
I havent heard that name ever
No idea how this has anything to do with ssh I wont lie
ur words of wizardry are beyond me

I dont open any ports unless necessary
if I dont have my vpn on
ports arent open
You can create a private vpn network with multiple servers and you connect to that vpn to access your servers internally essentially
^
Cloudflare has a similar thing with their warp stuff

It has a local ssh/erm whats it called
VNC
Vnc
Wait what
considering its literally a vm
thats fucking ridiculous
not even having a Web Terminal
fixed it by just launching a new instance
and this time not fucking up and not adding port 22
:))
Now devspace can manage it
and I can move on to using authentik tmrw
Also this is funny
puny ass memory tho
fuck

lmao
My authentik uses 900mb
Hallo zusammen wie kann ich den Button zu einem switch Button machen ? (wegen dem meme code ) <div style="background-color: #1e1e2f; padding: 20px; border-radius: 12px; width: 400px; height: 195.94px; color: white; font-family: Arial, sans-serif; margin: 30px auto; text-align: center; box-shadow: 0 4px 8px rgba(0, 0, 0, 0.2);"> <h2 style="font-size: 24px; margin-bottom: 10px;">Test4000</h2> <p style="font-size: 16px; line-height: 1.6;">eine naricht XD.</p> <a href="/server/{{id}}/settings/meme_feature" class="link"> <button class="button" id="testButton" style="padding: 10px 20px; font-size: 16px; border: none; border-radius: 5px; background-color: #2ecc71; color: white; cursor: pointer;">Beispiel-Feature</button> </a> </div> danke an jedem im vorauss โค๏ธ
Heeya guys i have question! How long it can take to review my bot?
Few days
The time varies depending on how much free time the reviewers have and how many bots are in the queue
Do you mean a toggle?
A switch Button from left to right going
https://www.w3schools.com/howto/howto_css_switch.asp this might help you
Yeah but its trigger a db
For my /meme command
<a href="/server/{{id}}/settings/meme_feature" class="link">
you know ?
what are you doing? are you trying to update a value in your db when a user clicks on the button?
if so, hrefs are not for that
i have it fix but thanks !
ich mรถchte gerne meine website verรถffentlichen benutze Termius wie kann ich machen das meine Datenbank lรคuft ? ```class FeatureDB(ezcord.DBHandler):
def init(self):
super().init("meme.db")
async def setup(self):
await self.exec(
"""CREATE TABLE IF NOT EXISTS settings (
guild_id INTEGER PRIMARY KEY,
meme_feature INTEGER DEFAULT 0
)"""
)
async def get_setting(self, guild_id, feature):
return await self.one(f"SELECT {feature} FROM settings WHERE guild_id=?", guild_id)
async def toggle_setting(self, guild_id, feature):
await self.exec("INSERT OR IGNORE INTO settings (guild_id) VALUES (?)", guild_id)
await self.exec(
f"UPDATE settings SET {feature} = NOT {feature} WHERE guild_id = ?", guild_id
)``` also auch das รคnderungen dort vorgenommen werden kรถnnen und so ?
best archive format ๐ฅ
-rw-r--r-- 1 root root 761264059 Apr 17 18:54 a.zip```
compress
```root@remotedev:~/projects/0x7d8/ddup-bak/testing# time ../target/release/ddup-bak encode a a.ddup > /dev/null
real 0m15.274s
user 0m14.396s
sys 0m0.804s
root@remotedev:~/projects/0x7d8/ddup-bak/testing# time zip -rq a.zip a
real 0m12.217s
user 0m11.464s
sys 0m0.752s
root@remotedev:~/projects/0x7d8/ddup-bak/testing# ```
decompress
```root@remotedev:~/projects/0x7d8/ddup-bak/testing# time ../target/release/ddup-bak decode a.ddup a2 > /dev/null
real 0m1.148s
user 0m0.468s
sys 0m0.679s
root@remotedev:~/projects/0x7d8/ddup-bak/testing# time unzip -q a.zip -d a2
real 0m2.919s
user 0m2.438s
sys 0m0.480s
root@remotedev:~/projects/0x7d8/ddup-bak/testing# ```
Aber habe das ganze in einer database also nur eine database.py
ty
๐
tes
@prime cliff how long does it take authentik to start ๐ญ
Jesus
I guess first starts are slow
a minute or two but you can check logs
I mean you're not gonna be restarting it often so xD
Right so its a bit confusing but I think I understand idk
I will def check it out more
thanks for recommendation
hey someone told me i could use .setName on a channel with spaces etc.
Sadly i can't
but i do see a lot of ppl having that though, so is there a workaround?
spaces in channel names don't work and afaik discord patched the invisible unicode characters that people used at one point for it
edit: in text channels. voice channels can have spaces
Iirc there was a one day issue, where there wasn't the check
Fixed soon after but there was still time in-between
Oh yikes, I can't use authentik actually
Gotta have an enterprise license for Microsoft or Google auth

Hu?
Which thinkin about it I probably can so idk why they have specific options for entra and google
Thatโs easily self hostable
What's that
Was looking for a decent alternative to clerk and found this
Interesting
Have you heard of zitadel?
It's rather nice, but it still can use some work
I am still exploring the market though
Yea use openid
I think those enterprise options are basically for like user syncinhlg and other stuff maybe? Idk
user syncing?
https://zitadel.com is a decent one as well. I've played with it and its honestly amazing
It has everything supertokens has and more for free when you self host it
the only sucky thing is the support server is slow asf
It only seemingly lacks one thing, and thats the ability to intercept requests and cancel them before any auth actually happens, which is what I need
Yea like how azure directory has users that you can sync to authentik
According to builderb I can do that with authentik tho
Interesting
Does zitadel not have like policies or permission based restrictions?
It should
permission no
it uses role based auth
Not even per user or based on incoming data like emails that's pretty weird tbh for an auth software to not have basic auth stuff xD
Yea
Idk
I like zitadel but I found myself having to do quite a bit on my end
For one of my projects that I feel like not doing auth for myself I was going to use zitadel
until I found out that I can't intercept auth requests how I would want to.
Since I need to deny authentication (aka registering or logging in) if their email domain isn't authorized
Which brings a lot of headaches for me cause now I can no longer just give it all to zitadel to handle, I have to do way more work than I would want. Which defeats the purpose of even using an IDP
Authentik is great but definitely needs some polish tbh
It looks great so far
Still setting it up fully before I can go and test it 
There's another project that is definitely not for the lighthearted people
its called ORY
It's rather extensive
Yea basically an oauth/login request goes through a stage that can be set with multiple policies and per-role/user restrictions and can be sent to the next stage or deny
and def not for noobies like me
That sounds amazing for what I need
Assuming im understanding correctly
Sounds like i'd be able to accomplish what I want
for those who are curious
Ory is absolutely fucking massive and very extensive in terms of setting it up
It splits it into 4 different projects each doing its own thing for like Roles & Permissions, Identity Management, Validation
Yea like a stage can be information, form, action or writing to the user and shows a neat diagram of the stages
You can set like custom oauth flows and user registration that adds them to a group for example
User and roles
nice
These default flows are also the built-in account settings, 2FA and other interactions on the user side so everything is customizable
God I hate Unity Animators
This may sound like a stupid question
but I can use authentik for multiple projects right
like I dont need to host another instance for a different project?

how come
Yea you can use an oauth/openid for this and multiple providers (projects)
Not sure I follow in that regard
What I am asking is can I use one instance of authentik to like say provide auth for project A and then auth for project B
Animator State transition Exit time only works in normalized time instead of having a fixed time like transitions do. I have to make an animation that does an inconsequential action to act as a noop for the desired time and then set the exit time to 1 to wait for the clip to "finish"
Right so a provider as in like Discord, Google, Microsoft?
Discord is a social account connection
Oh wait
Authentik's terminology is different than what im used to
Providers are what is being used to authenticate with authentik
sources are what can be used to authenticate such as Discord, Google, or Microsoft
from my understanding
Gotcha
Social accounts are the reverse you connect them to your authentik account as a secondary way to login to Authentik like passwordless/2fa login
I swear. 4 days since my reapply for intents, Im ssry still locked.
Im planning to switch to proxmox soon. My system meets min requirements to run it and honeslty tired of dealing with casaos and there non existant support.
Any advice b4 i switch?
Im planning either proxmox or a actual instullation of PTERODACTYL
Both would work well. I need your opinion on proxmox tho.
learn how the ui works before you install it
because the ui can be confusing
especially firewall rules
How am i ment to learn the ui?
Just read the docs
Also i shouldent need any firewall rules. All id be running is local instances. Nothing going past that pc really. Maybe some local storage too.
Im more or less deciding to switch due to the lack of support for my old system (Casaos)
Tbh just started reading the setup docs. Pterodactyl is harder then this already. PTERO you have to install Every Little Single Thing to get it to run. This does alot for ya.
yup
Im prob gonna hold off a sec till i get some new parts. But this is showing better pot.
รง.
Lol
real
:^)
besides not needing to setup hosts and routes for everything docker
what do you use traefik for lol
It's just a reverse proxy for me
cough using coolify
ah fair
Wie kann uch verifizierter Bot-Entwickler der ersten Stunde bekommen ?
@knotty night tysm sir for approving my bot EclipseX

What exactly is traefik
I heard its a reverse proxy, so how does it differ from nginx
you have use docker labels to control routing
wait what
interesting
postgresql:
container_name: authentik-postgres
image: docker.io/library/postgres:16-alpine
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
start_period: 20s
interval: 30s
retries: 5
timeout: 5s
volumes:
- database:/var/lib/postgresql/data
environment:
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_USER: ${POSTGRES_USER}
POSTGRES_DB: ${POSTGRES_DB}
env_file:
- /home/dyeaaronjr/authentik/.env
Can you not specify env files like this? Because when using devspace it returns an error that the accessed variables POSTGRES_USER,POSTGRES_DB,POSTGRES_PASSWORD are not set
Is this not allowed in docker?
i thought env_file had to be inline
env_file: /dyeaaronjr/authentik/.env
or
env_file: ./.env
Donโt you need to add a dash before each variable?
According to documentation no
Switching now to proxmox. Still gonna use PTERO for now just bc im use to it. But this is gonna be alot better.
My current system SUCKS
Casaos is advertised as "User Friendly" Its not
I put the ddup in ddup-bak ๐ฅ
total 12
-rw-r--r-- 1 root root 8466 Apr 18 19:09 test1.ddup```
```root@remotedev:~/projects/0x7d8/ddup-bak/testing/.ddup-bak/archives-restored/test1/a/mcheli# mcvcli version
checking installed version ...
checking installed version ... DONE
installed jar location: server.jar
installed jar version:
type: FORGE
version: 1.12.2 (outdated)
build: 14.23.5.2860 (latest)
installed java version: 8
root@remotedev:~/projects/0x7d8/ddup-bak/testing/.ddup-bak/archives-restored/test1/a/mcheli#```
880MB turned into a 8.5KB archive (chunks stored in another place, referenced via id which is resolved to a hash via a chunk index)
I have no fuckin clue what you are doin
but it seems cool
and you seem to be enjoying it
so gj
ITS ALIVE !!!!
Now to setup a vm for the bots on 100
This is scary. Idk what i did
@vapid berry What did i do?
When you can look
Proxmox
Thats under the lvm tab
Idk why its using 2TB tho. The actual OS is like 30GB
Unless its reserving it for some reason
Not sure
i havent had an issue like that
you can probably just ignore it
Will i have the 2tb avalible?
if you've allocated a 2tb drive i dont see why not
I dont mind ignoring it as long as i can use some storage
Its a 2.5TB drive i believe. I expect proxmox to take 30gb
did you allocate your vm 2tb?
I have no VM setted up yet.
I setup my proxmox instance forever ago so im a bit rusty on how the setup goes
Im sure i screwed smth up. Just not sure what
Im also surprised this pc is actually running it ok
I mean you can always wipe it and start over
Less then 1gb ram used idle
I just am confused why its using 2TB for a install? That makes no sence to me
Proxmox is only like 30GB from what i have seen. Why is the LVM taking 2TB
the default proxmox lvm setup makes a 1.9tb volume for vm disks
and gives rest to system
(stupid)
Thats is dumb ASF
i usually install proxmox with btrfs
Fortunetly i am only running VM so it wont affect me too much
This is already better then my works system lol
๐ ๐ ๐
Am i doing this wrong?
whats the issue
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem is really really old btw, most modern setups dont need it
i used Certbot
doesnt matter, it's not really required
nginx ignores the one
are you connecting via https
cause that looks like it's very much a wss connection
yeah im using wss://
its working?
so wdym "it's ignoring it"
nvm
weird
I seem to be able to connect tho
so idk what you mean by its ignoring it
aaand disconnected
@hidden gorge
it's definitely working lmao
ps: add auth pls (ik u will)
I WAS WONDERING WHO TF WAS SPAMMING MY WEBSOCKET
lmfao
i thought it was my friend ๐ญ
LMAOOOOO
i will someday
rn im just testing comms between roblox and websockets
rip to my actions minutes
hey, can i make a copy button?
Like i saw a server that was able to make a copy to clipboard button lmao
In a website you can using the navigator web API
You can enable concurrency btw
so it'll disable the previous action if a new one is started before it finishes
Does anyone have any cool online tools or resources that they use which would be nice to add, i currently have these.
https://jvilk.com/MakeTypes/ maybe?
Or code prettier/beatufier
For your database design one, https://www.drawdb.app/ is nice
Whoa now that is dam cool i don't use js/typescript but i can see that being really useful
I use it a lot for apis
just take their json response, paste it in there, boom a type/types
Thanks will see how it compares to https://dbdiagram.io
Audio tools?/converter?
also if you add so many tools id reccomend making it searchable/categorized
How do i use HTML and CSS in my bot's profile page ?
A nice dropdown yea Popular, All, Media, Web, Dev, Text
I think theres that color rgb/hex website
is this for your portainer esque app?
Color hex is a easy to use tool to get the color codes information including color models (RGB,HSL,HSV and CMYK), css and html color codes.
Yup it is, working on a dashboard for home page to add these tools
what about an option to add your own tool too then?
Because I have a couple websites I know I would use but wouldn't be like for everyone type thing
Is that dashboard site wide or per server
For the user itself
Or do you mean like?
https://docs.fluxpoint.dev/devspace it's docker container run
is the dashboard on the site, or for each container
You run the website with docker and then run any agent/server nodes with docker on any servers you want to manage.
Then you create a team/organization to add those servers and other future services
so like youd run devspace, and could manage per se your 5 discord bots which are running on servers as services on there?
Yea from across multiple servers
Would the dashboard page be one per devspace or one per service you run?
The dashboard page would just be the users own personal one
So any teams, resources and tools they have access to
Like what azure portal does with categories, tools and recent or pinned resources
ahhh okay
I'm working on getting full docker support atm which is on-par with portainer and working on future updates with a lot of neat built-in tools
For your calendar you should add natural language if you don't have it, so you can just say like idk "appointment 2 weeks from today at 5 pm"
although that's probably not needed/fitting given the use
You mean like voice assistant features that would be kind of interesting to add although not really a main feature
well like just typing it, like you could click on a date and add an event or just type something like that, and it would use NLP to get what you're adding (appointment) and the date
I would see how google and outlook (old) do their calendars and then adapt from it
that's fair, i use google and notion calendar
I could add notion integration too
Been lookin for something like this
gonna try this once I get the 520 server outa my car lol
Hey
Any idea why bold isnt working in
_ The patient exhibits very tough skin. Possibly a superhero. _ The patient has not been diagnosed.
Pulse: Strong โ โStatus: Awake
Temp: 98.6 โ โOperation site: _ Not sanitized _
You can't see what you are doing!
Incisions: 0 โ โ
_ Patient is prepped for surgery. _
The bold.in incisions
You're missing **
atp should i be worried thats its just spiking?
network latency happens 
okay, just wanted to ask just incase
eu:
hits: 129004
misses: 18749
us-east:
hits: 323842
misses: 18826
sg:
hits: 4459
misses: 2344
(last 2 days)
very good hit to miss ratio ig
Is this concept good enough for a support dashboard?
sure but shouldnt pending tickets be green when less?
Wdym?
If its down, its not a bad thing
You want your pending tickets to be down
So make it green indicating something good
if pending tickets are on the rise, that means they aren't being handled fast enough
so make it red indicating something bad
Hallo zusammen wenn ich das ganze deaktiviere (0) kommt der text das es deaktiviert ist doch wenn die DB aus 1 ist kommt der meme nicht doch wieso ?
async def meme(interaction: discord.Interaction):
guild_id = interaction.guild_id
meme_enabled = await db.get_setting(guild_id, "meme_feature")
if meme_enabled != 1:
await interaction.response.send_message(":x: Der Meme-Befehl ist fรผr diesen Server deaktiviert!", ephemeral=True)
return
async with aiohttp.ClientSession() as session:
async with session.get("https://meme-api.com/gimme") as meme_resp:
if meme_resp.status == 200:
json_data = await meme_resp.json()
meme_url = json_data.get("url")
if meme_url:
embed = discord.Embed(title="Hier ist dein Meme :joy:", color=discord.Color.random())
embed.set_image(url=meme_url)
await interaction.response.send_message(embed=embed)
else:
await interaction.response.send_message("Konnte kein Meme finden. :cry:", ephemeral=True)
else:
await interaction.response.send_message("Fehler beim Abrufen des Memes. :cry:", ephemeral=True)```
wenn das ganze local lรคuft geht es doch auf meinem server Nicht !!!
can anyone tell me how to make a bot online and working i got code but idk how to make it work
Run it either on your computer (which is not always a good idea if you downloaded the code from the internet) or on a server you rent
like i want to make it 24/7
i cant run it 24/7
on my pc
i wont run my pc all day
where can i do it then
There are free hostings but usually your bot won't work because of the cloudflare ban, there are also free trials from larger providers but they require a credit card and there is also an option to make a http only bot using cloudflare workers for free afaik
is digital ocean a good host
I haven't used it personally, but someone on this server did, from what I remember at least
@prime cliff since you've used authentik before, I am a bit confused. Am I supposed to be replacing the values here with my own client ID and secret or whats going on
Authentik is seeming less and less what I thought it was
You have a better chance of a reply when writing in english since not everybody understands german
๐
And regarding your question, you need to invert your if to have the behaviour you described
ah wait nvm the wrapped lines of the code snippet confused me
well, do you have any errors?
No that's for the external oauth project you want to login with for the authentik user (Example top.gg website), for social accounts like Discord that you want to link with authentik that's under the social connections option
Ah here?
Wait
this makes so much more sense 
Appreciate it
Ton more options that make sense
I was wondering why they fuckin blocked google and microsoft

Yea that's for user account syncing and stuff not actual account links
Thank you so much 
So I assume I can just create a user account via the api when they register on my site, and then when I want to say link discord to their user account I can just push them to one of my social login integrations?
This looks a lot more extensive
time to do more research
It has a its own registration page too
Oh yeah I'll add that into the concept later
where do you find this
Open private browser and go to your authentik domain for example auth.fluxpoint.dev
You need to enable registration and customize branding
I am trying to find these options
@sharp geyser under System > Brands
Right
but how do I enable registration
I dont see where
Ive looked at every settings option
yuh
You should see default-authentication-identity then edit that with a Flow Settings then Entollment
Yea you might have to change the registration stage to allow unauthed users
Since it will be disabled by default
Or flow should i say
default-source-enrollment flow
Then change it to no auth required
I've added the prompts for email and passwords to the enrollment stage/flow and still no dice
I don't get what im doing wrong and why it says Request has been denied all the time
There is no auth requirement
Refresh?
Tried refreshing yea
lmao
Is the enrollment flow set to no requirement not require no authentication
How are you...
How am I what?
What about the flow policies
Idk how you managed to break it xD
Wait
this policy might be the cause no?
cause its not coming from an external IdP
or am I misunderstanding
Wait
Password confirmation above password lol
Authentik is definitely different and also crazy complex with how it works
looks like it failed to send the confirmation email
idk why tho

Jesus fucking christ
found out why
but boy is the error long asf
Apparently the email is not verified?!?
The error is 791 lines long...
Also yea my bad it has nothing to do with enrollment flow i think that's for sso/oauth
It's the register flow mine was hidden on the next page, mobile curse
Yea there will be a log for it



