Skip to content

Commit 46c206a

Browse files
authored
Add note about LFM interaction with domain blocks/allows (#1833)
1 parent b97bc4e commit 46c206a

File tree

3 files changed

+12
-4
lines changed

3 files changed

+12
-4
lines changed

content/en/admin/config.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -68,11 +68,15 @@ Secure mode does not hide HTML representations of public posts and profiles. HTM
6868

6969
When set to `true`, Mastodon will restrict federation to servers you have manually approved only, as well as disable all public pages and some REST APIs. Limited federation mode is based on secure mode (`AUTHORIZED_FETCH`).
7070

71-
When switching an existing instance to limited federation mode, the following command should be used to remove any already existent data on non-allowed domains:
71+
Consider the impact of this feature on other features:
7272

73-
```bash
74-
tootctl domain purge --limited-federation-mode
75-
```
73+
- When limited federation mode is enabled, domain blocks are ignored and domain allows are enabled. When switching an existing instance to limited federation mode, the following command should be used to remove any already existent data on non-allowed domains:
74+
75+
```bash
76+
tootctl domain purge --limited-federation-mode
77+
```
78+
79+
- When limited federation mode is disabled, domain allows are ignored and domain blocks are enabled. When disabling this mode (thus placing the server in a wider network) you may want to first import a domain blocklist to reduce the possibility of accidentally exposing your community to bad actors.
7680

7781
{{< hint style="warning" >}}
7882
This mode is intended for private use only, such as in academic institutions or internal company networks, as it effectively creates a data silo, which is contrary to Mastodon's mission of decentralization.

content/en/methods/admin/domain_allows.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ aliases: [
1616
#TableOfContents ul ul ul {display: none}
1717
</style>
1818

19+
This endpoint creates rules to allow only the specified domains to federate with your server. This only applies when [LIMITED_FEDERATION_MODE](../../admin/config#limited_federation_mode) is enabled. This is the inverse of the [Domain Blocks](./domain_blocks) functionality, and cannot be used to override a wild-card domain block.
20+
1921
## List all allowed domains {#get}
2022

2123
```http

content/en/methods/admin/domain_blocks.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ aliases: [
1616
#TableOfContents ul ul ul {display: none}
1717
</style>
1818

19+
This endpoint creates rules to prevent the specified domains from federating with your server. This only applies when [LIMITED_FEDERATION_MODE](../../admin/config#limited_federation_mode) is disabled. This is the inverse of the [Domain Allows](./domain_allows) functionality.
20+
1921
## List all blocked domains {#get}
2022

2123
```http

0 commit comments

Comments
 (0)