Should zimit IP be made public so people can whitelist it?

[Popolechien]

There's been this interesting case over at Reddit where a user's host blocks zimit via Captcha. It does not sound like they can do much about it, but should / could we make our IP public so that people can whitelist it and thus allow zimit to run without having to reach out to us first?

[rgaudin]

Good point. I can't think of any valid reason not to.

[benoit74]

Are we speaking about the IP behind zimit.kiwix.org worker(s)? Or any of our zimit workers in general?

I'm not convinced that we are yet at a stage where publicly disclosing all workers IPs is a good idea, it can definitely drive more attacks on our infra from my PoV, and workers security is not that strong.

And I'm not even sure that the zimit user you are speaking about was running from zimit.kiwix.org or its own machine (in which case it would not help to whitelist our IP).

[Popolechien]

I can't find the discussion anymore but my impression (and question) was they were discussing zimit.kiwix.org

[benoit74]

Discussion is here and they indeed used zimit.kiwix.org