[mythtv-users] Demise of Mythweb

[Peter Bennett]

On 2/3/25 17:41, John Lovejoy wrote:
> I am currently running MythTV from the v35 PPA on Ubuntu 25.10
>
> For the last couple of times I have performed an "apt upgrade", all 
> elements of MythTV being upgraded as normal, except for mythtv-backend 
> which has been marked as "not upgrading".
>
> If I manually perform an "apt install mythtv-backend", I am told that 
> mythweb will be removed.
>
> If I understand correctly, this is because mythweb is being totally 
> deprecated, with users expected to rely on the web app interface on 
> port 6544.
>
> If this is the case, it is totally unacceptable to me, because it does 
> not seem possible to secure the web app interface, whereas it is 
> fairly easy to password protect mythweb.
>
> I love the fact that I can log on to mythweb from anywhere in the 
> world to alter my recording schedules. I cannot keep everyone else in 
> the world from doing the same (or worse, modifying the backend setup). 
> I am sure that I am not the only person to do this.
>
> Is there a way of securing the web app? Is there a way of keeping 
> mythweb (other than reverting to an earlier version and never updating)?
>
> John
>
>
The webapp can only be accessed from your local subnet, unless you set 
"Allow connections from all subnets" in setup, Host Address Backend 
Setup. So by default you are secure, even if you open port 6544 on your 
router.

You can use a VPN to securely access your local network remotely, or you 
can use VNC to connect to the server remotely and run the web pages on 
the remote server. Personally I use VNC.

How much security do you need? Do you set up SSL on your server or do 
you trust logins over http?

web app has been there for a year now and you are the first to ask about 
signon security. If this is important to you please open an issue in 
github at https://github.com/MythTV/mythtv/issues .

Peter