Elsing
(Markus)
January 3, 2020, 9:20pm
1
Hi
the new nice Frontail log viewer seems not to work with Safari. I am accessing my RP3 openhabian setup with https, but when I try to go to Frontail, it tries to fall back to an unsecure connection. There is probably a way to fix this ?
Thanks in advance, Markus
I believe frontail, by default is only http on port 9001. You could set yup an nginx secure reverse proxy as detailed on our security documentation page.
1 Like
Elsing
(Markus)
January 3, 2020, 9:24pm
3
Ah, similar to what one does for 8080 and 443. I’ll try this and report back.
Thanks ! M.
1 Like
Elsing
(Markus)
January 3, 2020, 10:17pm
4
Awesome, works. I added to my nginx setup /etc/nginx/sites-enabled/openhab the following reverse proxy setup for channel 444:
## Reverse Proxy to Frontail
server {
listen 444 ssl;
server_name ...myip..;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
## Secure Certificate Locations
ssl_certificate /etc/ssl/certs/openhab.crt;
ssl_certificate_key /etc/ssl/certs/openhab.key;
location / {
proxy_pass http://localhost:9001/;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
## in this case we allow for now password
satisfy any;
allow all;
## Password Protection
auth_basic "Username and Password Required";
auth_basic_user_file /etc/nginx/.htpasswd;
}
## Let's Encrypt webroot location
location /.well-known/acme-challenge/ {
root /var/www/localhost;
}
}
I then had to hack the dashboard file in /etc/openhab/services/dashboard.cfg, searching for frontail and replacing the link:
frontail.link-url=https://{HOSTNAME}:444
Works like a charm with safari.
Thanks for the help, Markus
1 Like