Your self-hosted, globally interconnected microblogging community
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Eugen Rochko 5265df0a8a
Change signature verification to ignore signatures with invalid host (#13033)
Instead of returning a signature verification error, pretend there
was no signature (i.e., this does not allow access to resources that
need a valid signature), so public resources can still be fetched

Fix #13011
5 years ago
.circleci Fix Gemfile.lock (#12995) 5 years ago
.dependabot Change dependabot update schedule from live to weekly (#10949) 6 years ago
.github Add config for issue template (#12306) 5 years ago
app Change signature verification to ignore signatures with invalid host (#13033) 5 years ago
bin Bump webpacker from 3.5.5 to 4.0.2 (#10277) 6 years ago
config New Crowdin translations (#12953) 5 years ago
db Fix interactive delays in database migrations with no TTY (#12969) 5 years ago
dist Add TLS v1.3 support (#11603) 5 years ago
lib Bump version to 3.1.0rc2 (#12999) 5 years ago
log
nanobox Resync Nanobox files with the 2.9.0 release (#11083) 6 years ago
public Updated Twemoji to 12.1.3 (#12342) 5 years ago
spec Change signature verification to ignore signatures with invalid host (#13033) 5 years ago
streaming minor server-sent events fixes (#12945) 5 years ago
vendor Increase files checked by ESLint (#9705) 6 years ago
.buildpacks Add ffmpeg buildpack for scalingo (#8500) 6 years ago
.codeclimate.yml Update ESLint and RuboCop in Code Climate (#12534) 5 years ago
.dockerignore Add .bundle to .dockerignore (#7895) 7 years ago
.editorconfig Add final newline to locale files (#2890) 8 years ago
.env.nanobox Fix sample SAML_ACS_URL, SAML_ISSUER (#12669) 5 years ago
.env.production.sample Document AUTHORIZED_FETCH mode and WHITELIST_MODE (#12856) 5 years ago
.env.test Bump webpacker from 4.0.7 to 4.2.0 (#12416) 5 years ago
.env.vagrant fix vagrant connection error (#12180) 5 years ago
.eslintignore Increase files checked by ESLint (#9705) 6 years ago
.eslintrc.js Refactor icons in web UI to use Icon component (#9951) 6 years ago
.foreman Replace sprockets/browserify with Webpack (#2617) 8 years ago
.gitattributes Add .gitattributes file to avoid unwanted CRLF (#3954) 8 years ago
.gitignore Use eslint cache (#12668) 5 years ago
.haml-lint.yml Added haml-lint and fix warnings (#2773) 8 years ago
.nanoignore Remove Storybook (#4397) 8 years ago
.nvmrc Upgrade .nvmrc to Node.js 12 (#12906) 5 years ago
.profile Add ffmpeg and dependent packages as well as LD_LIBRARY_PATHs (#3276) 8 years ago
.rspec
.rubocop.yml Update ESLint and RuboCop in Code Climate (#12534) 5 years ago
.ruby-version Use Ruby 2.6.5 (#12049) 5 years ago
.sass-lint.yml Fix sass-lint config (#10982) 6 years ago
.slugignore Remove Storybook (#4397) 8 years ago
.yarnclean Replace from scss-lint to sass-lint (#10958) 6 years ago
AUTHORS.md Update AUTHORS.md (#12096) 5 years ago
Aptfile Adjust Aptfile for Heroku-18 stack (#8588) 6 years ago
CHANGELOG.md Update changelog for 3.1.0rc1 (#12992) 5 years ago
CODE_OF_CONDUCT.md Add code of conduct from GitHub generator (#5674) 7 years ago
CONTRIBUTING.md Edit CONTRIBUTING.md (#12401) 5 years ago
Capfile remove capistrano/faster_assets from Capfile (#2737) 8 years ago
Dockerfile Update Dockerfile (#12997) 5 years ago
Gemfile Bump Rack from 2.0.8 to 2.1.2 (#12991) 5 years ago
Gemfile.lock Fix Gemfile.lock (#12995) 5 years ago
LICENSE
Procfile Bind servers to 0.0.0.0 in Procfile (#11378) 6 years ago
Procfile.dev Fix Procfile on OS X (#6748) 7 years ago
README.md 2019 -> 2020 (#12867) 5 years ago
Rakefile
Vagrantfile Fix Node version in Vagrant (#13008) 5 years ago
app.json Remove deprecated config from Heroku and Scalingo (#11925) 5 years ago
babel.config.js Remove unnecessary dependencies (#12533) 5 years ago
boxfile.yml Correct the Nanobox deploy hooks for order and context (#12663) 5 years ago
config.ru
crowdin.yml Update Crowdin configuration file 5 years ago
docker-compose.yml Add healthcheck endpoint for web (#11770) 5 years ago
package.json Bump @babel/core from 7.7.7 to 7.8.3 (#12893) 5 years ago
postcss.config.js Increase files checked by ESLint (#9705) 6 years ago
priv-config TOR federation (#7875) 7 years ago
scalingo.json Remove deprecated config from Heroku and Scalingo (#11925) 5 years ago
yarn.lock Bump @babel/core from 7.7.7 to 7.8.3 (#12893) 5 years ago

README.md

Mastodon

GitHub release Build Status Code Climate Crowdin Docker Pulls

Mastodon is a free, open-source social network server based on ActivityPub where users can follow friends and discover new ones. On Mastodon, users can publish anything they want: links, pictures, text, video. All Mastodon servers are interoperable as a federated network (users on one server can seamlessly communicate with users from another one, including non-Mastodon software that implements ActivityPub)!

Click below to learn more in a video:

Screenshot

Navigation

Features

No vendor lock-in: Fully interoperable with any conforming platform

It doesn't have to be Mastodon, whatever implements ActivityPub is part of the social network! Learn more

Real-time, chronological timeline updates

See the updates of people you're following appear in real-time in the UI via WebSockets. There's a firehose view as well!

Media attachments like images and short videos

Upload and view images and WebM/MP4 videos attached to the updates. Videos with no audio track are treated like GIFs; normal videos are looped - like vines!

Safety and moderation tools

Private posts, locked accounts, phrase filtering, muting, blocking and all sorts of other features, along with a reporting and moderation system. Learn more

OAuth2 and a straightforward REST API

Mastodon acts as an OAuth2 provider so 3rd party apps can use the REST and Streaming APIs, resulting in a rich app ecosystem with a lot of choices!

Deployment

Tech stack:

  • Ruby on Rails powers the REST API and other web pages
  • React.js and Redux are used for the dynamic parts of the interface
  • Node.js powers the streaming API

Requirements:

  • PostgreSQL 9.5+
  • Redis
  • Ruby 2.4+
  • Node.js 10.13+

The repository includes deployment configurations for Docker and docker-compose, but also a few specific platforms like Heroku, Scalingo, and Nanobox. The stand-alone installation guide is available in the documentation.

A Vagrant configuration is included for development purposes.

Contributing

Mastodon is free, open-source software licensed under AGPLv3.

You can open issues for bugs you've found or features you think are missing. You can also submit pull requests to this repository, or submit translations using Weblate. To get started, take a look at CONTRIBUTING.md. If your contributions are accepted into Mastodon, you can request to be paid through our OpenCollective.

IRC channel: #mastodon on irc.freenode.net

License

Copyright (C) 2016-2020 Eugen Rochko & other Mastodon contributors (see AUTHORS.md)

This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License along with this program. If not, see https://www.gnu.org/licenses/.