[mythtv-users] Can't re-record some old recordings

Michael T. Dean mtdean at thirdcontact.com
Fri Jan 17 03:21:47 UTC 2014


On 01/16/2014 05:30 PM, Anthony Giggins wrote:
>
> Just a word of warning
>
> if this is going to be a extension of the existing backend web 
> interface you will not be able to use apache reverse proxying 
> (mod_proxy) as this is an application server and not a true web server.
>
> If anyone has a working solution to use apache to reverse proxy to the 
> backend web interface, I love to see so configs.

FWIW, I'm still a proponent of a proxy application (i.e. a PHP app or 
whatever) that:

a) allows proxying of /specific/ whitelisted parts of the backend 
application (ideally configurable), completely refusing many 
"unnecessary for access via the Internet" requests
b) allows taking advantage of Apache's authentication
c) provides configurable authorization (i.e. role/group specification 
and which tasks/pages/services each is allowed to access)
d) provides more stuff that I'm sure someone will figure out when this 
is implemented.

The only way I'll ever use the backend-provided web application outside 
my local network without the above is using ssh port forwarding because 
I'm never going to expose the backend's web port to the Internet, 
regardless of how much security we build into it.  We just don't have as 
many users testing the quality of that security as Apache has (nor have 
we had our web app security tested for as many years as Apache's 
security/reliability-for-use-on-the-Internet-at-large has been tested).  
I don't want some of the backend's HTTP functionality available to 
anyone (me, included) via the external Internet--things like 
adding/changing/deleting settings, creating and running user 
jobs/setting up system event handlers (can you say, "pwned"), database 
maintenance stuff, reading/writing/changing database data, editing 
recording cut lists/transcoding recordings, much of the Service API 
stuff, ...

If anyone's interested in starting a project, ...  :)

Mike


More information about the mythtv-users mailing list