[SAC] [OSGeo] #2696: Weblate sending notifications about osgeo9

#2696: Weblate sending notifications about osgeo9
---------------------------+-----------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Keywords:
---------------------------+-----------------------
I've started getting alerts from weblate.osgeo.org
I think I just need to make a config change.

{{{
nvalid HTTP_HOST header: 'osgeo9.osgeo.osuosl.org'. You may need to add
'osgeo9.osgeo.osuosl.org' to ALLOWED_HOSTS.

Report at /exports/rss/
Invalid HTTP_HOST header: 'osgeo9.osgeo.osuosl.org'. You may need to add
'osgeo9.osgeo.osuosl.org' to ALLOWED_HOSTS.

Request Method: GET
Request URL: https://osgeo9.osgeo.osuosl.org/exports/rss/
Django Version: 4.0.1
Python Executable: /usr/local/bin/python
Python Version: 3.10.1
Python Path: ['/', '/usr/local/lib/python3.10/site-
packages/git/ext/gitdb', '/', '/usr/local/bin',
'/usr/local/lib/python310.zip', '/usr/local/lib/python3.10',
'/usr/local/lib/python3.10/lib-dynload', '/usr/local/lib/python3.10/site-
packages', '/app/data/python', '/usr/local/lib/python3.10/site-
packages/gitdb/ext/smmap']
Server time: Fri, 14 Jan 2022 18:38:33 +0000
Installed Applications:
['customize',
  'weblate.addons',
  'weblate.auth',
  'weblate.checks',
  'weblate.formats',
  'weblate.glossary',
  'weblate.machinery',
  'weblate.trans',
  'weblate.lang',
  'weblate_language_data',
  'weblate.memory',
  'weblate.screenshots',
  'weblate.fonts',
  'weblate.accounts',
  'weblate.configuration',
  'weblate.utils',
  'weblate.vcs',
  'weblate.wladmin',
  'weblate.metrics',
  'weblate',
  'weblate.gitexport',
  'django.contrib.auth',
  'django.contrib.contenttypes',
  'django.contrib.sessions',
  'django.contrib.messages',
  'django.contrib.staticfiles',
  'django.contrib.admin.apps.SimpleAdminConfig',
  'django.contrib.admindocs',
  'django.contrib.sitemaps',
  'django.contrib.humanize',
  'social_django',
  'crispy_forms',
  'compressor',
  'rest_framework',
  'rest_framework.authtoken',
  'django_filters']
Installed Middleware:
['weblate.middleware.RedirectMiddleware',
  'weblate.middleware.ProxyMiddleware',
  'django.middleware.security.SecurityMiddleware',
  'django.contrib.sessions.middleware.SessionMiddleware',
  'django.middleware.csrf.CsrfViewMiddleware',
  'weblate.accounts.middleware.AuthenticationMiddleware',
  'django.contrib.messages.middleware.MessageMiddleware',
  'django.middleware.clickjacking.XFrameOptionsMiddleware',
  'social_django.middleware.SocialAuthExceptionMiddleware',
  'weblate.accounts.middleware.RequireLoginMiddleware',
  'weblate.api.middleware.ThrottlingMiddleware',
  'weblate.middleware.SecurityMiddleware']

Traceback (most recent call last):
   None

Request information:
USER: Anonymous

GET: No GET data

POST: No POST data

FILES: No FILES data

COOKIES:
sessionid = 'gwqx3g5sbb8hpxwhkal4zduj5rlp6rw5'

META:
CSRF_COOKIE =
'7qNaAIFW96I0A6JeEkPkzCfNHdZ9k6oByAQPqpFe6xX8NY9Z5BIQwmrQNIUo3Weq'
HTTP_ACCEPT = 'image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
image/png, */*'
HTTP_ACCEPT_CHARSET = 'iso-8859-1,utf-8;q=0.9,*;q=0.1'
HTTP_ACCEPT_LANGUAGE = 'en'
HTTP_CONNECTION = 'close'
HTTP_COOKIE = 'sessionid=gwqx3g5sbb8hpxwhkal4zduj5rlp6rw5'
HTTP_HOST = 'osgeo9.osgeo.osuosl.org'
HTTP_PRAGMA = 'no-cache'
HTTP_USER_AGENT = 'Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)'
HTTP_X_FORWARDED_FOR = '100.27.42.244'
HTTP_X_FORWARDED_HOST = 'osgeo9.osgeo.osuosl.org'
HTTP_X_FORWARDED_PROTO = 'https'
HTTP_X_FORWARDED_SERVER = 'osgeo9.osgeo.osuosl.org'
HTTP_X_REAL_IP = '100.27.42.244'
PATH_INFO = '/exports/rss/'
QUERY_STRING = ''
RAW_URI = '/exports/rss/'
}}}

About 4 hours ago. I got about 10 of them though they all went into my
SPAM folder.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2696&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2696: Weblate sending notifications about osgeo9
---------------------------+------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

Okay I think this might have been just a bot, and since weblate is the
only website with an https, it tried to access it, but weblate is set to
only respond to weblate.osgeo.org and so screams if it gets traffick for
another domain.

I added a letsencrypt https cert for the default website
osgeo9.osgeo.osuosl.org which will serve as the catchall instead of
weblate.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2696#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.