phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Answer every apex WebFinger query with phil's record

Browse Source 
Tailscale's issuer lookup didn't match the resource=acct:phil@ filter,
got redirected to GoToSocial, found no issuer and fell back to Authentik.
phil is the only account here, so serve the same record for all queries.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-31 09:05:22 -06:00
co-authored by Claude Opus 5.5
parent c9c05df534
commit 078c32cdc3
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/Caddyfile.j2
+3 -5
View File
@@ -48,16 +48,14 @@ thesatelliteoflove.com {
# WebFinger for phil@ serves two readers: the fediverse (GoToSocial's account # WebFinger for phil@ serves two readers: the fediverse (GoToSocial's account
# domain is this apex) and Tailscale, which finds the tailnet's login # domain is this apex) and Tailscale, which finds the tailnet's login
# provider through the OpenID issuer link. # provider through the OpenID issuer link.
@webfinger_phil { # Answered for every query: Tailscale's lookup doesn't always send
path /.well-known/webfinger # resource=acct:phil@..., and phil is the only account here anyway.
query resource=acct:phil@{{ primary_domain }} @webfinger_phil path /.well-known/webfinger
}
route { route {
header @webfinger_phil Content-Type application/jrd+json header @webfinger_phil Content-Type application/jrd+json
header @webfinger_phil Access-Control-Allow-Origin * header @webfinger_phil Access-Control-Allow-Origin *
respond @webfinger_phil `{"subject":"acct:phil@{{ primary_domain }}","aliases":["https://{{ subdomains.social }}/users/phil","https://{{ subdomains.social }}/@phil"],"links":[{"rel":"http://openid.net/specs/connect/1.0/issuer","href":"https://{{ subdomains.pocketid }}"},{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"https://{{ subdomains.social }}/@phil"},{"rel":"self","type":"application/activity+json","href":"https://{{ subdomains.social }}/users/phil"}]}` 200 respond @webfinger_phil `{"subject":"acct:phil@{{ primary_domain }}","aliases":["https://{{ subdomains.social }}/users/phil","https://{{ subdomains.social }}/@phil"],"links":[{"rel":"http://openid.net/specs/connect/1.0/issuer","href":"https://{{ subdomains.pocketid }}"},{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"https://{{ subdomains.social }}/@phil"},{"rel":"self","type":"application/activity+json","href":"https://{{ subdomains.social }}/users/phil"}]}` 200
# Other fediverse discovery goes to GoToSocial. # Other fediverse discovery goes to GoToSocial.
redir /.well-known/webfinger https://{{ subdomains.social }}{uri} 301
redir /.well-known/host-meta* https://{{ subdomains.social }}{uri} 301 redir /.well-known/host-meta* https://{{ subdomains.social }}{uri} 301
redir /.well-known/nodeinfo https://{{ subdomains.social }}{uri} 301 redir /.well-known/nodeinfo https://{{ subdomains.social }}{uri} 301
} }