#devpi — Public Fediverse posts

Security bug-fix for devpi-server incoming on Thursday, June 11th 2026 at 14:00 UTC❗️

If your instance is behind nginx with devpi-lockdown or not accessible to untrusted users at all (local/private network only), you are good, same with default settings for anything besides --serverdir, --host and --port. More details coming with the release.

Boosts welcome for spread, as this account is new and has no other posts yet.

#python #devpi #security #infosec #vulnerability

@python Has anyone
successfully used #devpi #DevpiServer or #proxpi as a local caching proxy for an #artifactory that serves pypi packages?

For me devpi-server tries to pull some +changelog file it seems artifactory doesn't have, and I don't know what proxpi is doing but it's getting 406 errors from Artifactory.

Another quick entry in my series on how and what I #SelfHost: #Monitoring

#UptimeKuma monitors and alarms all of the services and hosts I run, #HealthChecks(.io) for monitoring and alarming cron jobs, and #SmokePing for network monitoring (no alarming). I've used #Pushover for years to deliver notifications to my phone, but I'm slowly switching things to #SelfHosted #Gotify

With servers, laptops, and a ton of docker containers, I run network caches to be a good neighbour, and prevent duplicate requests to upstream repos when I'm doing updates, builds, or deployments. For Apt-based repositories, I use Apt-Cacher-NG, for Docker images (runs on swarm), I have a Docker Registry Mirror (runs on swarm), #DevPi as a #PyPi cache (on swarm), and I have Squid running on pfSense for the odd HTTP-cacheable content.

🏷️ #SelfHosting