snac2/doc/snac.8, branch masterFork of snac2 to test neighborhood #webhttps://git.r.bdr.sh/snac2/atom/doc/snac.8?h=master2026-04-02T18:50:03ZUpdated documentation.2026-04-02T18:50:03Zgrunfinkgrunfink@comam.es2026-04-02T18:50:03Zurn:sha1:c9bbfc340bd88f9134f5bcef1448768c14546c67Updated documentation.2026-04-02T14:51:24Zgrunfinkgrunfink@comam.es2026-04-02T14:51:24Zurn:sha1:98f20473bf054050a418eb8b164e2fdd14c1fddeOpenBSD: Document login class w/ extended openfiles2026-02-17T22:03:23ZAlvar Penningpost@0x21.biz2026-02-17T22:03:23Zurn:sha1:361fdaaa11226554854cb292fe0ed6b372898320
A file heavy applications makes heavy use of files. Shocking news.
OpenBSD's daemon login class limits the amount of openfiles quite
strict. This restriction is an annoyance for lots of applications, and,
unless I am mistaken, seems to be an issue for snac as well.
Thus, after hopefully fixing this on my instance, I tried to briefly
document this in snac(8) and provide a minimal login.conf(5) example.
snac(8): Words of caution for strip_exif configuration2026-02-05T21:52:35ZAlvar Penningpost@0x21.biz2026-02-05T21:52:35Zurn:sha1:110032fb486c4491edbfafd906f5784f36bd0f51
Add words of caution and reasoning to the "strip_exif" configuration for
the server.json file, as these commands would be executed outside of the
sandbox - at least on OpenBSD - and both have quite a history on
security issues due to their huge attack surface and variety of
supported protocols.
After getting comfortable with the related code, I would continue using
it on a personal instance, but would reconsider enabling "strip_exif" on
shared instances with multiple users.
IMO, snac administrators should at least know of potential dangers.
poll-limits: revert accidentally commited changes2026-01-24T23:30:38Zgreendandelions@disroot.org2026-01-24T23:30:38Zurn:sha1:a14cf4a7dbbf6ee90ef8ff4974e7fe9a023d6e48poll-limits: added documentation to the man page2026-01-24T23:05:03Zgreendandelions@disroot.org2026-01-24T23:05:03Zurn:sha1:2216ac4662eed9235eadcafcfbf83928750abb67Updated documentation.2026-01-12T13:31:42Zgrunfinkgrunfink@comam.es2026-01-12T13:31:42Zurn:sha1:cf2335c3a65ace85bc49ec0db8a92617280da35aImplement metadata stripping for uploaded videos2026-01-06T11:18:00ZStefano Marinellistefano@dragas.it2026-01-06T11:18:00Zurn:sha1:03d270a56b751bc53b83381d9fef21da8d4cbb91
- Extend `strip_media` to support video files using `ffmpeg`.
- Use `ffmpeg -map_metadata -1 -c copy` to strip global metadata.
- Support formats: mp4, m4v, mov, webm, mkv, avi.
- Add `ffmpeg_path` configuration option.
- Implement robust relative path handling (`user/` heuristic) to support jailed environments.
- Enforce strict checks on startup: fail if tools (mogrify/ffmpeg) are missing when enabled.
Implement configurable EXIF stripping for uploaded media2026-01-06T10:02:36ZStefano Marinellistefano@dragas.it2026-01-06T10:02:36Zurn:sha1:688c54c87355b5424f33f7b089814460a74af594
- Add `strip_exif` configuration option to enable metadata removal.
- Add `mogrify_path` configuration to specify external tool location.
- Implement strip_media using `mogrify -strip`.
- Support multiple image formats: jpg, png, webp, heic, heif, avif, tiff, gif, bmp.
- Add strict startup check: fail to start if `strip_exif` is enabled but `mogrify` is missing/broken.
- Update documentation in `doc/snac.8`.
Updated documentation.2025-12-19T09:30:33Zgrunfinkgrunfink@comam.es2025-12-19T09:30:33Zurn:sha1:758c0a367fd873fa67f1afd196e9458e42985222