From 2449e381b9ba07dd6deb5aacd374a09f2c6909b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Mon, 27 Jul 2026 14:04:41 +0200 Subject: [PATCH] docs(self-hosting): say that the offline tier alone does not stop the lookup The resolver is online-first, so mounting the databases fills the ASN and carrier but does not by itself keep login IPs on the host. Point at the IP_GEO_LOOKUP_DISABLED section that does. --- docs/self-hosting/geolite2.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docs/self-hosting/geolite2.md b/docs/self-hosting/geolite2.md index de985ecdc..8de132921 100644 --- a/docs/self-hosting/geolite2.md +++ b/docs/self-hosting/geolite2.md @@ -7,8 +7,11 @@ next to every sign-in. Two tiers can produce that: keyless, and on by default — which also means every login IP address of every account on the instance leaves the host. - **Offline.** MaxMind's GeoLite2-City and GeoLite2-ASN databases read - from a local directory. Nothing leaves the host, and the ASN database - is the authoritative source for the carrier. + from a local directory. The ASN database is the authoritative source + for the carrier and the AS number. Note that the resolver is + online-first: having the databases in place is not by itself enough to + stop the outbound lookup, see "Turning the online lookup off entirely" + below. The offline tier is optional and absent by default. The published image only carries the databases when the image build had a MaxMind licence key