From 98fd90f32d3edda91c40d64425c34844a574d05c Mon Sep 17 00:00:00 2001 From: Alex Bates Date: Sun, 11 Oct 2026 14:14:13 +0100 Subject: [PATCH] kuribo: stop answering Bluesky's age-assurance check in Caddy Caddy told every client that asked app.bsky.unspecced.getAgeAssuranceState that the account was assured. With the override off, Tranquil forwards age-assurance calls that carry atproto-proxy to Bluesky's AppView, which knows whether the account has been through age assurance. Tranquil still answers "assured" itself to clients that don't send the header. --- servers/kuribo/tranquil-pds.nix | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/servers/kuribo/tranquil-pds.nix b/servers/kuribo/tranquil-pds.nix index 71647b2..f30b366 100644 --- a/servers/kuribo/tranquil-pds.nix +++ b/servers/kuribo/tranquil-pds.nix @@ -25,6 +25,11 @@ in # Require invite code for registration invite_code_required = true; + + # Bluesky's AppView decides whether an account has been through age + # assurance. Turned on, this would tell Bluesky's clients that every + # account had, and give each one an adult's birthday. + age_assurance_override = false; }; storage = { @@ -55,14 +60,6 @@ in # Caddy config starhaven.caddy.adminEmail = pdsSettings.server.contact_email; - starhaven.caddy.extraHandles = '' - handle /xrpc/app.bsky.unspecced.getAgeAssuranceState { - header content-type "application/json" - header access-control-allow-headers "authorization,dpop,atproto-accept-labelers,atproto-proxy" - header access-control-allow-origin "*" - respond `{"lastInitiatedAt":"2025-07-14T14:22:43.912Z","status":"assured"}` 200 - } - ''; starhaven.caddy.fallbackHandle = '' handle { reverse_proxy http://127.0.0.1:${toString pdsSettings.server.port} -- 2.51.2