[mythtv-users] Demise of Mythweb

[Monkey Pet]

On Mon, Feb 3, 2025 at 3:03 PM James Abernathy <jfabernathy at gmail.com>
wrote:

>
>
> On Mon, Feb 3, 2025 at 5:42 PM John Lovejoy <john at wombatmanor.net> wrote:
>
>> I am currently running MythTV from the v35 PPA on Ubuntu 25.10
>>
>> For the last couple of times I have performed an "apt upgrade", all
>> elements of MythTV being upgraded as normal, except for mythtv-backend
>> which has been marked as "not upgrading".
>>
>> If I manually perform an "apt install mythtv-backend", I am told that
>> mythweb will be removed.
>>
>> If I understand correctly, this is because mythweb is being totally
>> deprecated, with users expected to rely on the web app interface on port
>> 6544.
>>
>> If this is the case, it is totally unacceptable to me, because it does
>> not seem possible to secure the web app interface, whereas it is fairly
>> easy to password protect mythweb.
>>
>> I love the fact that I can log on to mythweb from anywhere in the world
>> to alter my recording schedules. I cannot keep everyone else in the
>> world from doing the same (or worse, modifying the backend setup). I am
>> sure that I am not the only person to do this.
>>
>> Is there a way of securing the web app? Is there a way of keeping
>> mythweb (other than reverting to an earlier version and never updating)?
>>
>> John
>>
>
> The simple answer is, yes. Mythweb has not worked correctly with or
> without a password for several versions of mythtv. So I've been using the
> web app since v34. I'm not on v35 and below is how I
>

> Mythweb has not worked correctly with or without a password for several
versions of mythtv.

Hey, I am still using mythweb in v34 and it works for simple stuff like
scheduling and deleting recordings. My old eyes like the familiar UI, not
the fancy new one. I will be sad when mythweb works no more.

For remote access, I just VPN into my network.



> securely get access to mythtv. Exposing your mythtv to the WWW with just a
> password is crazy, IMHO. But what do I know, I only worked secure computing
> for 40 years before retiring.
>
> For my house connected via a cable modem I have a Raspberry PI 4 running
> Pi-Hole to do AD blocking, DNS Server, and Wireguard VPN.  This means that
> I can use a Wireguard client on my phone, tablet, or laptop when traveling
> to log into my home network and run mythfrontend, Web App, or anything
> else.  The only port that is not Stealth is the VPN port that Wireguard
> owns. I can also use Wireguard VPN to protect my web traffic when connected
> at a coffee shop.
>
> If you listen to any Security Podcast like Steve Gibson's Security Now,
> you'll hear about the risk of password only protection of websites.
>
> JIm A
>
> _______________________________________________
> mythtv-users mailing list
> mythtv-users at mythtv.org
> http://lists.mythtv.org/mailman/listinfo/mythtv-users
> http://wiki.mythtv.org/Mailing_List_etiquette
> MythTV Forums: https://forum.mythtv.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mythtv.org/pipermail/mythtv-users/attachments/20250208/f875b0b8/attachment.htm>