Evgeny Bondarenko
Evgeny Bondarenko
Drafts are a great and useful feature, but... Private posts are not drafts, that's completely another feature. And it is transparently supported on all major blog platforms. Implementing it with...
> I still don't understand why the function of hiding is needed. > > If you don’t need the article to be rendered and displayed, you can create a new...
> [hexojs/hexo-generator-alias#48](https://github.com/hexojs/hexo-generator-alias/pull/48) seems to be quite close to what you want, unless you prefer not to have the private post's link (/2020/01/02/a-private-post) and its title show up in index page....
> Same possibility that a user could make a typo on the front-matter (e.g. `privatr: true`) and the private post then get published. Yup, but this way you can only...
@curbengh Oops, while I changed `private:true` to `publish:false`, I found out that we already have property `published`, and those will create a mess :(
> Isn't [hexo-hide-posts](https://www.npmjs.com/package/hexo-hide-posts) what you're looking for? No, I already described it in feature request.
If someone else has this issue - it helped me to manually add referer to nginx config, which handles connection to authentik: ``` proxy_set_header Referer "https://my-authentik-domain.com:443"; ```
> That is a really bad not good idea and completely sidesteps CSRF protection. By forcing the `Referer` you open all of your users up to CSRF. The fact that...
I was able to pair it, but after some time, about 6 hours, it becomes unavailable.