Skip to content

Reapply "hydra-proxy: replace abuse handling with anubis" #703

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 6, 2025

Conversation

mweinelt
Copy link
Member

This reverts commit 4900942.

@mweinelt mweinelt requested a review from a team as a code owner May 30, 2025 23:44
appendHttpConfig = ''
map $http_x_from $upstream {
default "anubis";
nix.dev-Uogho3gi "hydra-server";
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I assume this is the difference that's going to allow this to avoid the problem we ran into last time? (I don't understand it)

Copy link
Member

@Mic92 Mic92 May 31, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this checking x-forwarded-for? This could need a comment because it's also not clear to me how it works.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

@jfly jfly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, but I don't understand what's different from last time.

@vcunat
Copy link
Member

vcunat commented Jun 2, 2025

@mweinelt: this has been deployed, right? So do we merge to avoid rewriting the deploy?

@mweinelt
Copy link
Member Author

mweinelt commented Jun 2, 2025

https://nix.dev/manual/nix/development/ is a redirect, not sure. I thought it was reverse proxying when we first tried this.

But the resulting page seems to have same-site cookie stuff going wrong. https://hydra.nixos.org/build/298617737/download/1/manual

@mweinelt
Copy link
Member Author

mweinelt commented Jun 6, 2025

Excluded build result downloads, let's hope bots don't scrape those 🤷

@mweinelt mweinelt enabled auto-merge June 6, 2025 00:46
@mweinelt mweinelt added this pull request to the merge queue Jun 6, 2025
Merged via the queue into main with commit 2375878 Jun 6, 2025
13 checks passed
@mweinelt mweinelt deleted the anubis-take-two branch June 6, 2025 00:55
@vcunat
Copy link
Member

vcunat commented Jun 6, 2025

Didn't go as planned? I see this one broken now: https://nix.dev/manual/nix/development/

@Mic92
Copy link
Member

Mic92 commented Jun 6, 2025

Mhm. Maybe we should remove this part of nix.dev for now and re-add it later when we have have actual build development docs for nix.dev. I don't want to depend on hydra for this feature.

@mweinelt
Copy link
Member Author

mweinelt commented Jun 6, 2025

LOL. I swear the behavior of Netlify changed between 8 hours ago and now. It did not reverse proxy hydra anymore and redirected instead, but now it does. Will look into it in a bit.

@mweinelt
Copy link
Member Author

mweinelt commented Jun 6, 2025

Blargh. Netlify just looks up the 302 from /job/nix/master/manual/latest/download/1/manual/ and then redirects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants