iiinova — where your digital self keeps evolving

altq.net (PDS) @altq.net · 08/04/2026

I am terribly sorry for this, but my admin still has not found the time and motivation to create a proper favicon for me.

altq.net (PDS) @altq.net · 08/04/2026

Small correction: Preferences do get stored in the PDS, not in the AppView, but they are not part of the main account repository. The rest seems correct.

altq.net (PDS) @altq.net · 08/04/2026

Thats is not on me, I deleted your last account completely when you left. App passwords, DMs, bookmarks, muted words/accounts and preferences get stored inside the AppView, in this case Bluesky. Looks like their AppView store everything for every outside account/PDS combination?

altq.net (PDS) @altq.net · 26/03/2026

Your handle is perfectly valid, see -> bsky-debug.app/handle?handl... You can change your handle to anything with *.altq.net while being hosted on me, that is intentional. You can check you handle and DID status also with PDSls, see -> pdsls.dev/at://did:plc... Including Audit log.

bsky-debug.app

Bluesky Debug

100

Reposted by altq.net (PDS)

bryan newbold @bnewbold.net · 25/03/2026

PDS hosters: folks should not have PDS_INVITE_REQUIRED=false in their config unless they know what they are doing. at a minimum you need CAPTCHAs on all signup routes, to block/disable the createAccount API flow, etc. we know this should be smoother.

713221

Reposted by altq.net (PDS)

fry69 @fry69.dev · 25/03/2026

If you host a PDS, please do not make it available on multiple DNS hostnames, see 🧵 ->

031

altq.net (PDS) @altq.net · 24/02/2026

Short outage in the last hour due to a regular kernel update reboot somehow breaking my hand crafted docker networking for the PDS. It is now reverted to host mode and everything is working again.

altq.net (PDS) @altq.net · 06/02/2026

I will continue to monitor this.

020

altq.net (PDS) @altq.net · 06/02/2026

After checking that I could access Bluesky with a different browser without login, I resorted to trying to restart the PDS and see if that helps. And it did, apparently. Unclear what happened exactly or what caused it. The graphs for this server do show a significant spike around that time ->

Network traffic/packets per second graph with spikes

130

altq.net (PDS) @altq.net · 06/02/2026

About 20 minutes ago I had to restart the PDS docker service manually, as all requests to the Bluesky infrastructure ended up in 5xx replies, according to the logs. This was the first time I had to do this. I noticed that my feed was not working anymore (timeout error).

121

altq.net (PDS) @altq.net · 22/01/2026

Oh, I am on this map too -> arewedecentralizedyet.online/map/?source=at

Screenshot of a map showing various PDS servers in Southern Germany, including altq.net with 9 users.

161

altq.net (PDS) @altq.net · 08/01/2026

javascript:alert("Does a javascript: URL exploit this guestbook?")

PDSls @pds.ls · 06/01/2026

Reposted by altq.net (PDS)

1.3.0 introduces a CAR explorer to PDSls pdsls.dev/car

PDSls CAR explorer (it's Jerry's repo archive)

59110

altq.net (PDS) @altq.net · 06/01/2026

Hello and welcome 👋

020

Reposted by altq.net (PDS)

Bailey Townsend 🦀 @pds.dad · 18/11/2025

If you use PDS Gatekeeper you will want to make this change manually to your /pds/composer.yaml instead of using pdsadmin update. Using pdsadmin update clears out your current compose with the one from the PDS repo. Should be a oneliner change

Shows the change alex made to the compose.yaml of containrrr/watchtower:latest to ghcr.io/nicholas-fedor/watchtower:latest

1246

altq.net (PDS) @altq.net · 15/11/2025

This PDS server now supports two factor authentication via email. You can now activate 2FA in your account settings. Thanks to tangled.org/@baileytowns... by @baileytownsend.dev Hint for other PDS admins: When using Postfix as your mail server add ?tls=required at the end of the SMTP URL.

tangled.org

@baileytownsend.dev/pds-gatekeeper

Microservice to bring 2FA to self hosted PDSes

0263

Reposted by altq.net (PDS)

fry69 @fry69.dev · 15/11/2025

FYI #atproto: To use this new goat tool on the PDS server, create a shell alias like this: $ alias goat="docker exec -it pds goat" $ goat --version goat version v0.1.2-rev-c43d54a $ goat account --help NAME: goat account - commands for auth session and account management [...]

282

altq.net (PDS) @altq.net · 09/11/2025

It does not work, as in this does not trigger an alert box in this "guestbook" on altq.net ->

Screenshot of the properly escaped and non-functional attempt to trigger an alert via <script> tag.

altq.net (PDS) @altq.net · 09/11/2025

Script test: <script>alert('This should not work.')</script>

220

altq.net (PDS) @altq.net · 08/11/2025

A tiny scriptlet or web component will do the trick, see the "guestbook" on the altq.net page for inspiration -> github.com/fry69/altq.n...

Rude1 Haunted Badness. ⁂ @rude1.blacksky.team · 04/11/2025

Reposted by altq.net (PDS)

FTR the app-view is up and has been for a few weeks. Ingesting terabytes of social media data is not trivial. I've worked to re-implement some experimental work by Divy into rsky-ingester, rsky-backfiller, and rsky-indexer When it's production ready, it'll move off of staging.blacksky.community

Grafana dashboard showing billions of records written to the database

525346

altq.net (PDS) @altq.net · 02/11/2025

I'm still in Nuremberg, Germany 📍 Good to know that my datacenter has not moved.

030

Reposted by altq.net (PDS)

bryan newbold @bnewbold.net · 02/11/2025

AT service operators and moderation thinkers: I put together an early proposal around infra abuse notices across organizational boundaries. really looking for feedback on this one, it is bait for counter-proposals and references to prior work!

58620

FYI: Lexicon names are reverse DNS: The lexicon app.mbdio.uk schema gets looked up via DNS as uk.mbdio.app Details are here ->

The moment self-hosted PDS with exploitable plugins will become popular, the HTTP request log on servers will gain a few new entries in the top 20 -> fry69.dev/_php_log

fry69.dev

Anyone can run a WordPress server, but few can maintain it and most will choose a managed solution for this reason (incl. "trusted" plugins through the hoster/service provider/etc).

Well, I think you cited WordPress as an example in another thread part. That is fitting in a way, as click & install plugins without further maintenance will lead to similar problems. E.g. compromising PDS and accounts through highjacked or intentionally malicious plugins.

Also stability requirements are high with a PDS. This goes a bit counter to the idea of plugins. There are not many PDS blacklisted yet, but I guess that will change when those start to become unreliable or malicious on significant scale. That is probably when "DNSBLs" for PDS will become a thing.

A great idea If this does not lead to unfulfillable expectations. While resource requirements for running a PDS are almost negligible, availability requirements are those of a web server (with graceful caching through relays/AppViews). There is a reason why the mentioned status page exists.

210

Upon popular request, the status page -> altq.net/status.html now shows an estimate for the CAR file size when requesting an archive. See also this 🧵 -> bsky.app/profile/altq...

altq.net

Server Status

141

OpenAI Codex was so nice to analyze the PDS source, come up with a proper/plausible algorithm for a CAR estimate and integrate it into the status script. It's live -> altq.net/status.html Code is here -> github.com/fry69/altq.n...

altq.net/bin/generate-status.py at main · fry69/altq.net

PDS modification for altq.net. Contribute to fry69/altq.net development by creating an account on GitHub.

131

If I'd show the file size of the SQLite it would give a false impression IMHO. The blob size is pretty much accurate.

The CAR file size is hard to estimate/compute as the data on disk is a SQLite file, which bloats everything with indexes and is obviously not compressed/optimized. Otherwise, the code is here -> github.com/fry69/altq.net