• Please visit and share your knowledge at our sister communities:
  • If you have not, please join our official Homebrewing Facebook Group!

    Homebrewing Facebook Group

Is it possible to secure the Craftbeerpi config/hardware and web page?

Homebrew Talk

Help Support Homebrew Talk:

This site may earn a commission from merchant affiliate links, including eBay, Amazon, and others.

rkhanso

Well-Known Member
Joined
Jan 24, 2017
Messages
785
Reaction score
178
Location
Plymouth, MN - terrible tap water for brewing
First - I did search this forum and the huge CraftBeerPi thread and didn't find any hits. Maybe my search terms were bad...

I'd like to secure the config pages for CraftBeerPi. I see on the Configuration | Configuration page, there are places showing password, username, WiFi_Socket_Password and WiFi_Socket_User settings. I've tried changing these and don't see any difference in the way the web pages work.

Is there a way to secure the Hardware and Configuration pages? Also, a way to secure the CraftBeerPi web page in general? It'd be nice to be able to have the data available on the web for checking remotely and letting others see what's happening --- but somehow lock down the UI from being able to make any changes at all unless you enter a username/password.

I have a different, but similar temp controller for my grill - HeaterMeter, which lets you view data but have to enter a username/password to make any changes.

Maybe the CraftBeerPI user interface just wasn't designed to be viewable from the Internet...

Thanks.
 
[...]Is there a way to secure the Hardware and Configuration pages? Also, a way to secure the CraftBeerPi web page in general?[...]

Look into setting up htaccess on Apache2 [edit: I actually didn't look to see what web server is used with CPB - hopefully it's Apache2 :)]
That can restrict access to actual users with account credentials on the hosting system.
A bunch of us used this on BrewPi configuration pages while allowing "read only" access to graphs 'n' stuff.
It's not an iron clad lock down but it'll keep less determined peeps from mucking with your settings...

Cheers!
 
I use remot3 (used to be called Weaved) for my Brewpi setup. Works great, and you can put the weavedpi app on your phone which saves your user credentials to automatically login. It is password protected, and from what I can tell its fairly secure. Not sure anyone has tried to hack my minifridge controller tho...

Its nice to be able to pull it up anywhere.
 
Back
Top