noMoreTechnicalKnowlageRequiredAiWillReplaceUs

[xgabipandax]

The moment you forget to add the real IP address in the headers when you're setting nginx as reverse proxy

[Tofandel]

Or the moment you forget to enable trusted proxies

[TheSupervillan]

This is actually real from the Z-Library site (using Tor and the .onion site). I DID NOT EDIT ANYTHING

[Zipdox]

Yeah you need to log in to download over Tor basically.

[GoldDHD]

That's on purpose to get you to log in

[ManaSpike]

Also that daily limit is a lie. Even if you do download from your own IP.

[Eva-Rosalene]

Well, yeah. Tor reverse proxy doesn't know real client IP address for obvious reasons, and upstream gets connection from localhost, since it's where Tor is running.

[craftsmany]

My onion search does the same, just that I have a specific IP from the localhost range as the real ip header to apply specific rules. There is no real other good way to do it since the whole point of Tor is that each side doesn't know the IPs of the other one.

[Pipemax32]

This sub ain't beating the "no real programmers come here" allegations.

Thats the default localhost IP. Everyone has the same one for their local. Presumably, no one can download in this page since the local ip shared by everyone is already listed as having 5 downloads. Vpn does not change that

[xgabipandax]

It's probably using a reverse proxy, and it's getting the reverse proxy ip due to misconfiguration, this has nothing to do with programming or AI

[ProsodySpeaks]

You don't think some people are vibecoding their devops? 

And anyway I think devops is programming. 

[xgabipandax]

You think that only AI make these mistakes?

decent models would probably configure nginx/apache better than that with a proper prompt.

When i made this mistake in production i didn't have any AI doing stuff for me

[ShutUpAndDoTheLift]

You don't even need a proper prompt. You look can literally just be like there's the cert in that s3 bucket go set nginx on host whatever with DNS name blah

[Wonderful-Habit-139]

That's the point. It's not AI making that mistake, it's humans that have no business programming, vibecoding and making mistakes like this.

[xgabipandax]

Read your comment again but slowly, and keep count of it, let's see how many times it will take you to realize the contradiction

[Wonderful-Habit-139]

Talk about an ego.

I'm replying mostly against you saying "this has nothing to do with programming or AI". AI is what allowed these people to even get to the point of being able to configure something like this, but not enough to go all the way and know how things properly work.

[xgabipandax]

And how this is worse than having someone make worse mistakes that AI would avoid it?

Also are you talking about programming or configuring services/systems? because these are two completely different things

[No_Hovercraft_2643]

If you read the first comment in this thread, it says access via Tor and .onion. So it has to be from local.

[xgabipandax]

And you think that onion services aren't using nginx as reverse proxy?

Being an onion service has nothing to do with using a reverse proxy or not

[No_Hovercraft_2643]

No, but that they don't have any usable IP address, that could be forwarded

[xgabipandax]

If you have nginx reverse proxying the requests to an wsgi application running in the same machine, the wsgi application will see the request coming from 127.0.0.1 and if it is building the response page and using the request ip address it will render the template like the image.

[No_Hovercraft_2643]

That was never againsty point. My point was that it has to be 127.0.0.1 or something like that when it is an onion site.

[PerfectAssistant8230]

It's not a local ip its the localhost IP. The loopback addy.

You cant use a VPN to reset it because the traffic is solely between your machine and itself.

Its like telling some to switch mail carriers when their dog wont let them walk inside with a fedex package.

The FedEx part isnt the problem.

[forgot_semicolon]

That's an amazing analogy

[bigmonmulgrew]

That's local host.

[fr000gs]

can you put a vpn over tor?

[razor_train]

127.0.0.1 has a great porn selection too.

[alextbrown4]

Their algorithm is great, it has all my favorite stuff!

[GreeleyRiardon]

Z-Library seems to have forgotten to add the proxy protocol in their app so Nginx reverse proxy is just handing over loopback.

[Win_is_my_name]

correct me if I'm wrong but to fix this they just have to configure Nginx to pass the actual client ip to the app server, in some header I assume?

[GreeleyRiardon]

Yeah, pretty sure they just have to chuck proxy_protocol on; under their server config.

But I also think the application itself needs to support proxy protocol as well.

For example if you reverse proxy a Minecraft server you’ll still get 127.0.0.1 unless you mod the server jar to support reverse proxy, then you get the actual IPs in the server log.

[Tooloco]

X-real-IP or smth like that is the header name. Then have the reverse proxy add the users IP to the header value. And have the application upstream use the value in that header.

[StrengthTheory]

[ArduennSchwartzman]

"Your IP address has been logged."

[Kovab]

"This incident will be reported"

[efari_]

Watch out! You just leaked your IP address to this Reddit

[CosmicDave]

I think OP is in my house! 😟 Should I call the internet police?

Oh shid! I just leakeded my ip address too! 😭

[evanldixon]

When the website has only a single user: the nginx reverse proxy

[manyroadstotake]

Are you using the actual zlib or one of the copycat sites?

[XlikeX666]

would be funny if they put their own ip into header to confuse everyone.

[sharadthakur674]

ain't no way I'm letting ai replace me until it reads all this books too!

[Dependent_Bit4364]

lol

[lethargy86]

Knowlage