Trying to purge them and set up with Lemmy Ansible, I’ve disabled signups without admin approval for now.
I see a postgres container and a password but I’m not very familiar with postgres, I tried psql but can’t get access
Edit: Also anyone who’s de-federated with us, please reconsider. We’re a small server with active admin and will get a handle on this, I promise! We had an easy process to sign up for a few days while I got my users over and forgot to turn it off
Edit2: Looking much more healthy now, I will put the commands I’ve used in a comment below
You must log in or # to comment.
Turn on captchas too.
I think the easiest is login to the docker and run the postgres client to run sql to delete users. I dont know how to differentiate between your bot and normal
Yeah that’s the issue I’m having, someone sent me a postgres command in DM earlier but it does seem to be a bit of a nuke/picking up ordinary users…
I wound up adding adminer to the docker-compose file temporarily to help me look through the data. In my case, there were no legitimate users who hadn’t verified their email, so I deleted all from local_users where the email verified column was false.
Huh adminer would definitely be an easier way to do this, do you have the part of the docker-compose you used with the env vars etc?
Yeah, I really just did a very basic setup:
adminer:image: adminerrestart: alwaysports:- 8080:8080When entering the database host, just enter “postgres” since that’s the host name it will have in the virtual network.
That’s okay I found it, luckily there’s a pattern here too… I dug up 27k with repeating numbers on emails which is a good start!
Hey there! Thank you for reaching out. I’ll definitely not block your instance then. Regarding postgres, first login to the postgres container with
docker exec -it containername busybox /bin/shYou can get the container name by running
docker ps. Once inside login to psql console withpsql -U lemmyI’ve written this from memory, but it should be very similar if not the same.
EDIT: Consider saving the usernames and details of the bots that signed up. We might be able to use that for some analysis.
Yup I’ve got them, luckily 5 or more repeating numbers in their email pretty much identified 99% of them. Would you like me to send the CSV somewhere? 27k+ bots
It’s be interesting to see where they are coming from, do you have up and user agents in the logs at all?
I don’t unfortunately, I deliberately don’t log that due to some of the sensitive stuff on my own instance (we’re China based)
The command to connect to the DB is
psql -U <user> <DB_name>.
Usually you also have to use the -p flag but I’ve been connecting directly to the container without it. Not sure if it’s because the container already has the password in a environment variabledocker exec -it postgres sh export PGPASSWORD=$POSTGRES_PASSWORD psql -u $POSTGRES_USER
Something like this by heart.
PM me tomorrow if you are stuck (I’m in Europe).
