Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Self signed SSL and password for localhost? #1645

Open
Blocked opened this issue Jul 25, 2023 · 2 comments
Open

Self signed SSL and password for localhost? #1645

Blocked opened this issue Jul 25, 2023 · 2 comments
Labels

Comments

@Blocked
Copy link

Blocked commented Jul 25, 2023

Since transaction data is very sensitive information, Is there a option to provide certificates, self signed or otherwise to host the data using https? Is there a way to provide some basic authentication like password based authentication?

Using it on a mobile device, where every app that has internet permission can access this localhost:5000, seems to be a privacy nightmare.

@yagebu
Copy link
Member

yagebu commented Jul 25, 2023

That's something that I would probably consider as being out-of-scope for the Fava CLI (AFAICT there's no way to add those things with a few extra lines using the libraries we currently use).

However, this can be achieved by using fava.application.create_app to create a Fava WSGI application and then running that application with a WSGI server and/or middlewares and/or proxies that support those features.

@guglielmobartelloni
Copy link

You can use a reverse proxy and something like authelia or authentik to get ssl and login protection, I have set it up this way and it works great.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants