eternal-flame-AD
0b0b39a9fe
Some checks failed
Lint / typecheck (misskey-js) (push) Blocked by required conditions
Lint / typecheck (sw) (push) Blocked by required conditions
Lint / pnpm_install (push) Successful in 1m48s
Test (production install and build) / production (22.11.0) (push) Successful in 58s
Publish Docker image / Build (push) Successful in 4m46s
Lint / lint (backend) (push) Successful in 2m12s
Lint / lint (frontend) (push) Successful in 1m58s
Lint / lint (frontend-embed) (push) Successful in 1m59s
Test (backend) / unit (22.11.0) (push) Failing after 7m31s
Lint / lint (frontend-shared) (push) Successful in 2m3s
Lint / lint (misskey-bubble-game) (push) Successful in 2m4s
Lint / lint (misskey-js) (push) Successful in 2m3s
Lint / lint (sw) (push) Has been cancelled
Lint / lint (misskey-reversi) (push) Has been cancelled
Lint / typecheck (backend) (push) Has been cancelled
Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
1.1 KiB
1.1 KiB
ゆめちのくに
YumechiNoKuni is a fork of Misskey, with a focus on security, observability and reliability.
mi.yumechi.jp is running this version.
Main differences
Unique features
- Strict ActivityPub sanitization by whitelisting properties and normalizing all referential properties.
- Strict Content Security Policy.
- Require TLSv1.2+ over port 443 for all ActivityPub requests.
- Strongly-typed inbox filtering in Rust.
- Reduce needless retries by marking more errors as permanent.
- Detailed prometheus metrics for slow requests, DB queries, AP processing, failed auths, etc.
- Disable unauthenticated media processing and use custom AppArmored media proxy.
- Enable active users in nodeinfo back.
- Logical replication for the database over mTLS.
- More atomic operations in API handlers.
Picked from github.com/paricafe/misskey
- pgroonga full-text search (with modifications).
- Better Service Worker caching.
- Better hashtag statistics.
- Better handling of deep recursive AP objects.