Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding webserver access user/pass #45

Open
andriej opened this issue Jan 2, 2023 · 1 comment
Open

Adding webserver access user/pass #45

andriej opened this issue Jan 2, 2023 · 1 comment

Comments

@andriej
Copy link
Contributor

andriej commented Jan 2, 2023

Going through some network-security internally, I can see that currently there's no doable way of securiing access to this addon (so non-VLAN network can have thermostat managed by anyone).

I can see that in .conf file of otmonitor there's space for nopass set to true.
I can't find options how it should look like to have at least admin user defined (and allowed in add-on configuration).

Would love to see that feature enabled tho.

Tried looking at source code but I'm not yet familiar enough with TCL

@andriej andriej changed the title Adding user/pass Adding webserver access user/pass Jan 2, 2023
@andriej
Copy link
Contributor Author

andriej commented Jan 3, 2023

After getting some sleep - the solution was quite simple ;-)
I've removed webserver port for otmonitor addon and it fully relies on HA ingess (which is secure enough for me in terms of WWW UI)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant