Trying to purge them and set up with Lemmy Ansible, I’ve disabled signups without admin approval for now.
I see a postgres container and a password but I’m not very familiar with postgres, I tried psql but can’t get access
Edit: Also anyone who’s de-federated with us, please reconsider. We’re a small server with active admin and will get a handle on this, I promise! We had an easy process to sign up for a few days while I got my users over and forgot to turn it off
Edit2: Looking much more healthy now, I will put the commands I’ve used in a comment below
You must log in or register to comment.
Turn on captchas too.
I think the easiest is login to the docker and run the postgres client to run sql to delete users. I dont know how to differentiate between your bot and normal
Yeah that’s the issue I’m having, someone sent me a postgres command in DM earlier but it does seem to be a bit of a nuke/picking up ordinary users…
I wound up adding adminer to the docker-compose file temporarily to help me look through the data. In my case, there were no legitimate users who hadn’t verified their email, so I deleted all from local_users where the email verified column was false.
Huh adminer would definitely be an easier way to do this, do you have the part of the docker-compose you used with the env vars etc?
Yeah, I really just did a very basic setup:
adminer:image: adminerrestart: alwaysports:- 8080:8080When entering the database host, just enter “postgres” since that’s the host name it will have in the virtual network.
Edit: I can’t get the formatting to look right, haha.
That’s okay I found it, luckily there’s a pattern here too… I dug up 27k with repeating numbers on emails which is a good start!
Great!
For me, psql at the command line is great in a pinch but not great for any kind of complex task. I’ll probably add adminer as a permanent option, but only served locally + add a VPN to the server, or figure out how to get my preferred DB tool (DataGrip) to connect via SSH.
There should be some management tools available via the GUI to lemmy admins, though. I’m so tempted to try to add it but I’m (generously) a rust novice.
Hey there! Thank you for reaching out. I’ll definitely not block your instance then. Regarding postgres, first login to the postgres container with
docker exec -it containername busybox /bin/shYou can get the container name by running
docker ps. Once inside login to psql console withpsql -U lemmyI’ve written this from memory, but it should be very similar if not the same.
EDIT: Consider saving the usernames and details of the bots that signed up. We might be able to use that for some analysis.
Yup I’ve got them, luckily 5 or more repeating numbers in their email pretty much identified 99% of them. Would you like me to send the CSV somewhere? 27k+ bots
It’s be interesting to see where they are coming from, do you have up and user agents in the logs at all?
I don’t unfortunately, I deliberately don’t log that due to some of the sensitive stuff on my own instance (we’re China based)
docker exec -it postgres sh export PGPASSWORD=$POSTGRES_PASSWORD psql -u $POSTGRES_USER
Something like this by heart.
PM me tomorrow if you are stuck (I’m in Europe).
The command to connect to the DB is
psql -U <user> <DB_name>.
Usually you also have to use the -p flag but I’ve been connecting directly to the container without it. Not sure if it’s because the container already has the password in a environment variable
