[mythtv-users] Demise of Mythweb

[James Abernathy]

On Mon, Feb 3, 2025 at 5:42 PM John Lovejoy <john at wombatmanor.net> wrote:

> I am currently running MythTV from the v35 PPA on Ubuntu 25.10
>
> For the last couple of times I have performed an "apt upgrade", all
> elements of MythTV being upgraded as normal, except for mythtv-backend
> which has been marked as "not upgrading".
>
> If I manually perform an "apt install mythtv-backend", I am told that
> mythweb will be removed.
>
> If I understand correctly, this is because mythweb is being totally
> deprecated, with users expected to rely on the web app interface on port
> 6544.
>
> If this is the case, it is totally unacceptable to me, because it does
> not seem possible to secure the web app interface, whereas it is fairly
> easy to password protect mythweb.
>
> I love the fact that I can log on to mythweb from anywhere in the world
> to alter my recording schedules. I cannot keep everyone else in the
> world from doing the same (or worse, modifying the backend setup). I am
> sure that I am not the only person to do this.
>
> Is there a way of securing the web app? Is there a way of keeping
> mythweb (other than reverting to an earlier version and never updating)?
>
> John
>

The simple answer is, yes. Mythweb has not worked correctly with or without
a password for several versions of mythtv. So I've been using the web app
since v34. I'm not on v35 and below is how I securely get access to mythtv.
Exposing your mythtv to the WWW with just a password is crazy, IMHO. But
what do I know, I only worked secure computing for 40 years before retiring.

For my house connected via a cable modem I have a Raspberry PI 4 running
Pi-Hole to do AD blocking, DNS Server, and Wireguard VPN.  This means that
I can use a Wireguard client on my phone, tablet, or laptop when traveling
to log into my home network and run mythfrontend, Web App, or anything
else.  The only port that is not Stealth is the VPN port that Wireguard
owns. I can also use Wireguard VPN to protect my web traffic when connected
at a coffee shop.

If you listen to any Security Podcast like Steve Gibson's Security Now,
you'll hear about the risk of password only protection of websites.

JIm A
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mythtv.org/pipermail/mythtv-users/attachments/20250203/137f2d2c/attachment.htm>