Hide default index page #3029
Unanswered
jbillma
asked this question in
How to do it?
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
So, I created my BlueSky handle directly on my own AT Protocol PDS using a domain I own. Works like a dream; I even got email authentication working without any issues by using Resend. My only issue is, anyone hitting my domain directly on the web is treated (and I do mean "treated") to the following info:
This is an AT Protocol Personal Data Server (PDS): https://github.com/bluesky-social/atproto
Most API routes are under /xrpc/
This seems to be a pretty big security hole, in that although it doesn't give the keys to the kingdom, it does give away the floor plan to the castle to anyone able to break in, so to speak. Now, I'm not really interested in running a web server alongside my PDS, and although I do know I can set up the PDS again as something along the lines of pds.mydomain.com, I really don't want to trash my me.mydomain.com handle by having to start a new one at me.pds.mydomain.com. Is there a simple solution to modify the Caddyfile so that plain ol' http/https traffic gets sent somewhere like my BlueSky profile, or maybe another website entirely? I'm thinking along the lines of how we would modify the default index.php on a LAMP server to whatever we wanted.
Beta Was this translation helpful? Give feedback.
All reactions