docs(issues): add the past issues which existed before tracking issues

add crowdsec false positive issues

fix the file name of affine android oidc issues
This commit is contained in:
2026-04-27 19:48:01 +09:00
parent 9569492e42
commit cb4d17f99e
4 changed files with 99 additions and 2 deletions

View File

@@ -0,0 +1,32 @@
# OpenCloud crowdsec false positive issue
## Status
- Finished
## Date
- 2026-04-04
## Version
- OpenCloud: 4.0.4
## Problem
- When users download some files, all connections to homelab services are refused.
- fw ban users' IP address.
## Reason
- OpenCloud uses chunks when clients uploads or download files to it.
- LAPI decides a ban when a lot of chunks file is uploaded or downloaded from external devices
## Timeline
- 2026-04-04: Release Immich
- 2026-04-04: Find the false positive case, and add whitelist
## Solution
- Access to fw
- Check the ban list with `sudo cscli alerts list`
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
- Add regex on whitelist
- evt.Meta.target_fqdn == '{{ services['opencloud']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/js/chunks/'
- Delete false positive decision
- Check false positive decision with `sudo cscli decision list`
- Delete false positive decision with `sudo cscli decision list --id $ID`