BreakTheStatic wrote: > Hey guys, I'm not sure if this is hijacking the thread or not. If so, > please disregard and tell me to open my own thread! > > I was also looking to add secure, remote access to my squeezebox server > and am already running Traefik as a reverse proxy (w/ SSL configured). > All my other services utilize app-specific security, so this would be my > first time working w/ basic auth on my reverse proxy. Being that SSL is > already enabled, would it be secure enough to use the proxy's (or LMS') > basic auth here? This is primarily to enable an Alexa skill I was > writing - I guess something similar to meep's hab-tunes (if that still > is happening) or the MediaServer smart skill mentioned previously. I > know the main concern w/ basic auth is the exposure of the headers in > *almost* plaintext on every request. If the traffic is encrypted w/ SSL > however, this is no longer a concern, and the only thing that really > comes into play is potential brute-forcing attempts, right? I was also > looking to implement fail2ban to handle blocking multiple auth failures > to prevent brute-forcing. Overall, do you guys think the setup > described above provides enough security?
I do reverse proxy and reverse auth on the firewall (Sophos UTM) this also does HTTP to HTTPS redirect works fine with "MediaServer smart skill" If Traefik can do the same it sounds like a good way to go especially if you can also use fail2ban. Jeff *Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLite-X,PiCorePlayer x3 *Server:* LMS Version: Latest Nightly on Centos 8.0 VM on ESXi 6.5.0U3 on Dell T320 *Plugins:* AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player Groups *Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLite-X *Music:* 522GB,1.5K albums with 25K songs by 5K artists mostly FLACs *Want a webapp ?* See http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS ------------------------------------------------------------------------ Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290 View this thread: http://forums.slimdevices.com/showthread.php?t=111300 _______________________________________________ Squeezecenter mailing list [email protected] http://lists.slimdevices.com/mailman/listinfo/squeezecenter
