So if you do the Docker setup, obeying the instructions and substituting everything that needs to get substituted, but don’t proofread the files in detail and so miss that line 40 of docker-compose.yml doesn’t have the variable {{domain}} like in every other location you need to write your domain, but instead just says LEMMY_UI_LEMMY_EXTERNAL_HOST=lemmy.ml and so you fail to change it away from lemmy.ml… then, everything will work, until you type in your admin password for the first time, at which point your browser will send a request to lemmy.ml which includes your admin username, your email address, and the admin password you’re trying to set. And, also, of course your IP address wherever you are sitting and setting up the server.

I have no reason at all to think the Lemmy devs have set their server up to log this information when it comes in. nginx will throw it away by default, of course, but it would be easy for them to have it save it instead, if they wanted to. And my guess is most people won’t use a different admin password once they figure out why creating their admin user isn’t working and fix it.

@[email protected] @[email protected] I think you should fix the docker-compose.yml file not to do this.

Edit: Just to increase the information-to-rudeness ratio of my post. The docs are at:

https://join-lemmy.org/docs/administration/install_docker.html

And they recommend using wget to download:

https://raw.githubusercontent.com/LemmyNet/lemmy-docs/main/assets/docker-compose.yml

Which is pulled from:

https://github.com/LemmyNet/lemmy-docs/tree/main/assets

Which is what has the wrong line 40 in it.

Edit: They fixed it. Good stuff.

    • PhilipTheBucket@ponder.catOP
      link
      fedilink
      arrow-up
      7
      arrow-down
      5
      ·
      edit-2
      6 hours ago

      I know, we don’t want our software sending our secrets to the trusted good leader, and we don’t feel like participating in places where only the leader’s viewpoint is acceptable. Unlike the non-sheep, who are fine with both those things apparently, because who wouldn’t trust the good leader.

        • PhilipTheBucket@ponder.catOP
          link
          fedilink
          arrow-up
          4
          arrow-down
          4
          ·
          5 hours ago

          Yeah, it’s crazy how we all have more or less the exact same opinions, and the leader bans anyone who doesn’t have those opinions, and we’re all fine with it and in fact justify it and claim it’s right, whenever it comes up.

          It’s totally insane. I have no idea how or why anyone would decide to make an account in our stuff. In fact, it makes other people suspicious of our designated good leader, even in scenarios where there isn’t otherwise a ton of reason to assume any malice.