34
How are we supposed to disable /setup after making an admin account on a newly created instance? (lemmy.world)
submitted 3 weeks ago* (last edited 3 weeks ago) by to c/fediverse@lemmy.world
8 comments fedilink hide all child comments
 

I made my admin account, but I can still accept /setup which looks like it will allow any random user to make an admin account as well.

How do I fix this?

Edit: It turns out that creating the admin account doesn't work, even though the page is still there.

all 8 comments

sorted by: hot top controversial new old
[–] 8 points 3 weeks ago (3 children)

Lemmy, PieFed, Mastodon?

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] [S] 7 points 3 weeks ago (2 children)

    This is for Lemmy.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 10 points 3 weeks ago*

    I don't see any guide talking about that. I would try some kind of Htaccess to prevent people from using /setup.

    It feels like a bandaid, but on the other hand I have never seen a "server application" where URLs like /setup can selfdestruct after one use.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 2 points 3 weeks ago*

    even lemmy.ml operated by its devs have /setup exposed and not working, i think its fine

    if it bothers you block or redirect the url on your web server's config

  • permalink
  • fedilink
  • source
    •
    [–] 2 points 3 weeks ago (1 child)

    Does it actually work?

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 2 points 3 weeks ago

    I don't think it does anything once the first admin account is created

  • permalink
  • fedilink
  • source
    •