aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--roles/mastodon/defaults/main.yml4
-rw-r--r--roles/mastodon/templates/opt/mastodon/mastodon/.env.production.j22
2 files changed, 6 insertions, 0 deletions
diff --git a/roles/mastodon/defaults/main.yml b/roles/mastodon/defaults/main.yml
index a166350..cc879f7 100644
--- a/roles/mastodon/defaults/main.yml
+++ b/roles/mastodon/defaults/main.yml
@@ -23,3 +23,7 @@ mastodon_streaming_port: 8009
mastodon_sysaccount_username: mastodon
mastodon_login_cidrs: []
+
+# Leaving anonymous access *disabled* by default until this issue is resolved:
+# https://github.com/mastodon/mastodon/issues/22620
+mastodon_disallow_unauthenticated_api_access: yes
diff --git a/roles/mastodon/templates/opt/mastodon/mastodon/.env.production.j2 b/roles/mastodon/templates/opt/mastodon/mastodon/.env.production.j2
index 03af34a..b28a94b 100644
--- a/roles/mastodon/templates/opt/mastodon/mastodon/.env.production.j2
+++ b/roles/mastodon/templates/opt/mastodon/mastodon/.env.production.j2
@@ -7,6 +7,8 @@ WEB_DOMAIN={{ mastodon_web_domain }}
DEFAULT_LOCALE={{ mastodon_default_locale }}
+DISALLOW_UNAUTHENTICATED_API_ACCESS={{ mastodon_disallow_unauthenciated_api_access | bool | to_json }}
+
# Redis
# -----
REDIS_HOST=localhost