#2938 -

AverageHelper commented

2026-07-25 00:56:13 +02:00

Comment

Not sure if this is the right place to report this, but it looks like some sort of false positive related to bot-blocking, so here goes..

I followed a link to https://codeberg.org/freebsd/freebsd-ports/src/branch/main/sysutils/desktop-installer, and noticed a scary-looking red banner on top that says "Error 403 when calling /FreeBSD/freebsd-ports/lastcommit/ec77dc5a2c4c1aef7213dc7e06602e89979ae378/sysutils/desktop-installer: Bye".

I can load the main page of that repo just fine, but trying to view most of the direct subdirectories (by clicking on the links on the page) leads to a plaintext page that only says Bye and an error 403 in the net log. This occurs regardless of login state.

Lowercasing the username in the URL at least gets the webpage to load, but then the banner appears, suggesting that the /lastcommit REST call might be triggering some kind of bot trap by getting the username "wrong".

I've tried a repo on my own account, but the site works fine regardless of whether my username is used as-is or lowercased, so I'm not sure what is happening differently with the FreeBSD account's one 😕

### Comment Not sure if this is the right place to report this, but it looks like some sort of false positive related to bot-blocking, so here goes.. I followed a link to https://codeberg.org/freebsd/freebsd-ports/src/branch/main/sysutils/desktop-installer, and noticed a scary-looking red banner on top that says "**Error 403 when calling /FreeBSD/freebsd-ports/lastcommit/ec77dc5a2c4c1aef7213dc7e06602e89979ae378/sysutils/desktop-installer: Bye**". I can load the main page of that repo just fine, but trying to view most of the direct subdirectories (by clicking on the links on the page) leads to a plaintext page that only says `Bye` and an error 403 in the net log. This occurs regardless of login state. Lowercasing the username in the URL at least gets the webpage to load, but then the banner appears, suggesting that the `/lastcommit` REST call might be triggering some kind of bot trap by getting the username "wrong". I've tried a repo on my own account, but the site works fine regardless of whether my username is used as-is or lowercased, so I'm not sure what is happening differently with the FreeBSD account's one 😕

Gusted commented

2026-07-25 01:24:28 +02:00

Owner

It seems our temporary block has now become a permanent block.

http-request return status 403 content-type text/plain lf-string "Bye" if { path_beg /FreeBSD/freebsd-ports/src/ } || { path_beg /FreeBSD/freebsd-ports/lastcommit/ }

I think this can be moved to only consider unauthenticated traffic and thus impact logged in users. But basically it's a heavy endpoint (thus also why it's loaded progressively) and was being heavily hammered by IPs that only made that request and no other requests.

It seems our temporary block has now become a permanent block. https://codeberg.org/Codeberg-Infrastructure/scripted-configuration/src/commit/747697cf1d8a021d17ee9ef8a9bcc7fdcb3ea424/hosts/_reverseproxy/etc/haproxy/haproxy.cfg#L321 I think this can be moved to only consider unauthenticated traffic and thus impact logged in users. But basically it's a heavy endpoint (thus also why it's loaded progressively) and was being heavily hammered by IPs that only made that request and no other requests.

👍 1

Gusted added the

bug

infrastructure

label

2026-07-25 01:24:46 +02:00

missytake commented

2026-07-31 12:50:04 +02:00

We have an authenticated bot that downloads the https://codeberg.org/webxdc/xdcget/ repository every 15 minutes, it also just sees 403 and Bye...

joyider referenced this issue from a commit

2026-07-31 12:54:55 +02:00

CI: fetch sources as API tarballs — Codeberg WAF 403s git-over-HTTPS

logrusx commented

2026-07-31 15:43:35 +02:00

git clone https://codeberg.org/librewolf/gentoo.git
Cloning into 'gentoo'...
remote: Bye
fatal: unable to access 'https://codeberg.org/librewolf/gentoo.git/': The requested URL returned error: 403

Why is that? How can I get over it?

``` git clone https://codeberg.org/librewolf/gentoo.git Cloning into 'gentoo'... remote: Bye fatal: unable to access 'https://codeberg.org/librewolf/gentoo.git/': The requested URL returned error: 403 ``` Why is that? How can I get over it?

laWiskaPY commented

2026-07-31 15:49:45 +02:00

It started happening to me too... But in a GitHub actions to have a mirror here.
It fixed itself, without me having touched anything.

It started happening to me too... But in a GitHub actions to have a mirror here. It fixed itself, without me having touched anything.

Chickengamer55 commented

2026-07-31 16:09:10 +02:00

yo im getting same issue

logrusx commented

2026-07-31 16:28:37 +02:00

It looks like you need to add SSH keys and authenticate: https://codeberg.org/user/settings/keys

davidhealey commented

2026-07-31 17:04:23 +02:00

I'm unable to push to my repo, instant Bye 403 message.

logrusx commented

2026-07-31 17:10:40 +02:00

@davidhealey wrote in #2938 (comment):

I'm unable to push to my repo, instant Bye 403 message.

add SSH/GPG keys to your account: https://codeberg.org/user/settings/keys

@davidhealey wrote in https://codeberg.org/Codeberg/Community/issues/2938#issuecomment-20363108: > I'm unable to push to my repo, instant Bye 403 message. add SSH/GPG keys to your account: https://codeberg.org/user/settings/keys

davidhealey commented

2026-07-31 17:11:31 +02:00

Why? I've never needed them before