[Feature] SSL Secure Connection

[ctsstc]

It would be great if we could support SSL given the web interface has a login field, but if I try to host this and access it it's not accepting secure connections unfortunately.

[rolandtannous]

even if you get an SSL certificate (let's say from let's encrypt), browsers (security feature) will give out a warning to users about the certificate everytime they navigate to the page, unless you link a domain name to the IP. So stick with the IP address and http for now.

[ctsstc]

@rolandtannous I'd rather my connection be secure even if I have to accept a warning, rather than sending my credentials across the network insecurely. There's also API keys implemented, but what's the point if they're being sent across the network without encryption?

In my scenario I'm consuming this across my LAN as well as through my domain name. I could install a tunnel, but it adds additional overhead that I would prefer to avoid.

[rolandtannous]

@ctsstc this is intended as local first. That's why.
I'll take this into consideration. Thank you for the response.

[rolandtannous]

@ctsstc for your case , you have the following options:
A- Private:

• SSH tunnel nothing to install on the server beyond Studio itself:

ssh -L 8888:localhost:8888 user@cloud-server

then open http://localhost:8888 with your local computer

No TLS needed. The tunnel is the encryption, and localhost never triggers a cert warning. Bind Studio to 127.0.0.1 so port 8888 isn't open to the outside.

• Tailscale or Wireguard . Check their respective docs.

B - Public (available to others as well):

• Cloudflare Tunnel on the cloud server . cloudflared dials out to Cloudflare, no inbound ports opened, valid cert.
• Caddy + a domain might also work.

This should solve your problem