As long as there is a bypass for /inbox it should be fine. I used to run my instance behind a WAF and I had to add that path to the allowlist so that federation requests would bypass it.
this post was submitted on 10 Jan 2026
5 points (100.0% liked)
Lemmy Support
5013 readers
8 users here now
Support / questions about Lemmy.
founded 6 years ago
MODERATORS
Actually, you could pose the same question with Anubis
Anubis definitely lead to some breakages where images wouldn't load for users of other instances viewing them in an app.