34
How are we supposed to disable /setup after making an admin account on a newly created instance? (lemmy.world)
submitted 3 weeks ago* (last edited 2 weeks ago) by to c/fediverse@lemmy.world
8 comments fedilink hide all child comments
 

I made my admin account, but I can still accept /setup which looks like it will allow any random user to make an admin account as well.

How do I fix this?

Edit: It turns out that creating the admin account doesn't work, even though the page is still there.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 3 weeks ago (3 children)

Lemmy, PieFed, Mastodon?

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] [S] 7 points 3 weeks ago (2 children)

    This is for Lemmy.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 10 points 3 weeks ago*

    I don't see any guide talking about that. I would try some kind of Htaccess to prevent people from using /setup.

    It feels like a bandaid, but on the other hand I have never seen a "server application" where URLs like /setup can selfdestruct after one use.

  • permalink
  • fedilink
  • source
  • parent