julian

Stoked to see BSD Cafe has a new site... Running NodeBB :sunglasses:

https://billboard.bsd.cafe/

Considering they don't run just anything, we're in good company! Their other instances run Mastodon (of course) and snac2, arguably one of the most lightweight ActivityPub services.[...]

Designed as a hybrid space, it functions as a classic discussion forum with persistent threads while also supporting ActivityPub federation, enabling cross-platform interactions without algorithmic curation. The project is built on NodeBB and aims to serve as a social hub for BSD and open-source communities, allowing users to engage in long-form discussions while participating in the broader decentralized social web.

— https://discoverbsd.com/p/f46dd3f825

Hi everybody,

With spring around the corner (it is currently a balmy 5°C here right now), it's time to get crackin' on a new release of NodeBB!

We focused on a lot of user experience updates this time around, along with tweaking the new /world page that was introduced in v4.9.0. In the backend, lots of optimizations were implemented, which make federation processing (and day-to-day maintenance) faster.

Here's what you can expect from v4.10.0...[...]

:globe_with_meridians: Updates to the /world page

The /world page got a makeover in v4.9.0, showcasing a more timeline-based feel. It more accurately represents the breadth of content available on the open social web, such as microblogging, in addition to long-form text (blogs), media-focused items, and everything in between.

We focused on UX updates to this page:

• New sorts are available: You can now view just local content, as well as all known content.
• The default sort continues to be "your followers", but also includes local content now as well, because you are also tracking those categories!
• Guests were barred from /world in v4.9.0, but this is now opened up again. Their view of the /world page shows only local posts.
• The /world page can now be set as a default home page.
• Duplicate items were showing up when scrolling down /world (especially on very active timelines)
• Uploaded images were showing up in the thumbnail/card headers, even if they were embedded in the post itself. The header is now restricted to topic thumbnails (and post attachments, which only occur with remote posts)
• Posts are now height-restricted, so long posts don't take up an inordinate amount of space. A "show more" button is available to expand posts in-timeline.
• The "quick create" editor at the top of this page now also lets you choose a category to post to. Administrators can update the default value as desired. It defaults to World/Uncategorized.

:speech_balloon: Alt Text now federating outward

Alt text was always supported in NodeBB, but this was not federated outward to remote instances. This is now supported for uploaded images and externally-linked images. Topic thumbnails do not support alt text at this time.

:arrow_upper_left: Soft redirects of remote content

Users unfamiliar with NodeBB were often surprised to see their content cached by NodeBB, despite this being how federation works. In order to reduce surprise, any guest navigating directly to a remote post or remote user will be soft-redirected out to the original source. This goes hand-in-hand with the topic-restriction feature in v4.9.0.

:computer: ActivityPub Outboxes published

For ActivityPub developers, we now publish outboxes as of this version.

:frame_with_picture: More profile pics!

@baris improved the avatar handling code so that NodeBB now remembers your last three used avatars, allowing you to toggle between them. You will no longer need to upload new pictures if you want to switch between previously-used avatars!

Follow counts better synchronized

@panos@catodon.rocks reported awhile back that follow counts in user pages were off. The logic was updated and should be back in sync with the real values once you follow/unfollow a user.

Up until today, when you queried a NodeBB user or category's outbox, you would receive an empty OrderedCollection. This was done because the property's inclusion in the actor object was required, but it was not immediately apparent in 2024 how many people utilised this property. Thus it was easier to just send the empty outbox and pursue more urgent functionality.

While sending that empty outbox has not broken any implementations, but it has come to my attention that a few (read: more than 1) other implementors already do, or plans to, read from an actor outbox for backfill purposes.

The upcoming NodeBB v4.10.0 will contain an outbox populated by the contributions by that user or category.

Here's how that works...[...]

For both users and categories, a standard OrderedCollection is returned, with first, last, prev, and next properties for navigation.

For users:

• A combined set of the user's activity is returned in the form of activities (Create, Like, etc.) — these activities include the user's posts, votes (both up and down), and shares.
• Unlike other collections, this one uses a cursor. You can pass ?before= or ?after= values in the query string to retrieve items 20 at a time.

For categories:

• A set of posts curated by this category is shown. It can contain both posts local to the instance, and remote posts from outside of the instance.
• All posts are wrapped in the Announce activity. If the post is local, it is an Announce(Create(Note/Article)), if it is a remote post, then it is just an Announce(Object) by reference.
• This collection is paged like other collections served by NodeBB.

It is possible that this implementation serves data in an unexpected manner. If this is the case, please reply here to contact me directly so it can be fixed.

I used my best judgement for what to include in the outboxes, as well as using Piefed as a reference implementation. @rimu@piefed.social, I notice that Piefed's community outboxes serve up Announce(Create(Page)) even if the Page is not local to the instance. I was under the assumption that remote content couldn't (shouldn't?) be expanded in this manner because you cannot guarantee the integrity of the data, and so announcing the object by reference is preferred. Just wondering your thoughts on that.

We are publishing a notice today to bring to attention an unintentional breaking change that could affect some users of NodeBB.

v4.5.0 contained an update to src/request.js that calls a DNS resolver to ensure that the destination address is not a reserved IP address (e.g. 192.168..., 127.0..)

This change was introduced in order to close off any potential for Server-Side Request Forgery for any calls made within the NodeBB codebase. [...]

In the vast majority of installations, this has no unintended effects. In some installations, custom plugins or themes may call URLs that resolve to an internal address on purpose (e.g. to query an internal database or similar.) In those situations, the call will now fail as of v4.5.0.

In those situations, you will need to update the plugin to add the domain to the allow list by calling the filter:request.init hook:

plugin.json

{
  ...
  "hooks": [
    ...
    { "hook": "filter:request.init", "method": "allowInternalHostname" },
    ...
  ]
  ...
}

library.js or similar

const plugin = module.exports;

plugin.allowInternalHostname = async ({ allowed }) => {
  allowed.add('example.org');
  return { allowed };
});

It is possible for NodeBBs to talk with each other. In fact, not only can two NodeBB forums see and share conversations, you can also connect with other websites that can federate.

This article is part of the NodeBB Answers category, where you can learn more about setting up, maintaining, and using your NodeBB forum. [...]

---

How does it work?

Under the hood, NodeBB uses a protocol called ActivityPub to exchange messages and activities between different websites and apps. Each user, category, topic, and post is able to be retrieved via this protocol, and users can follow each other in order to start seeing updates from another website.

How do I find other users and categories?

You can search for them in the search bar and search pages. Users and categories are identified by their username or handle, which looks something like @handle@website.com.

For example, I (@julian) can be found by searching for @julian@community.nodebb.org, and this category (@answers) can be found by searching for @answers@community.nodebb.org.

From there, you can follow users (or watch/track categories) to start the flow of new content to you. It's like subscribing to a newsletter. You'll start getting the new stuff, but you won't be able to see the old stuff unless you already know about it.

Okay, I started following some people, where do I see their posts?

Content from outside of the forum is all found inside the "World" page, accessible via /world. As new content comes in, it'll be shown in the feed-style timeline. Any remote categories you've started following will also show up in the sidebar for easy access.

How do I post to remote categories?

Once you've found some categories from outside of the forum (aka "remote categories"), you can browse back to them from the /world page. If you've watched/tracked the category, you can access them from the sidebar. Otherwise you'll have to search for them from the remote category search bar within this page.

Once you're in a remote category, you can start a new topic via the "New Topic" button just like a regular category on your forum, and your topic will be sent to the remote category for syndication.

Remember to follow the rules of other communities, as they may not match rules on your forum.