Teslamate: Something better than basic auth?

[wishbone1138]

I'm looking for suggestions on using a docker on a non-trusted network. I've got basic auth setup with Apache, but Tesla's web browser apparently does not support it. At least I couldn't find a way to get it to work, common syntax of username:password@ in the URL didn't seem to work. Should the project move to it's own auth model? (already supported on the grafana side)

[ngardiner]

I've used an nginx reverse proxy with vouch-proxy (search on GitHub) for
auth. This works fine for me via the tesla browser.

On Sat., 1 Feb. 2020, 1:25 pm wishbone1138, [e-mail]
wrote:

I'm looking for suggestions on using a docker on a non-trusted network.
I've got basic auth setup with Apache, but Tesla's web browser apparently
does not support it. At least I couldn't find a way to get it to work,
common syntax of username:password@ in the URL didn't seem to work.
Should the project move to it's own auth model? (already supported on the
grafana side)

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/adriankumpf/teslamate/issues/413?email_source=notifications&email_token=AGFF33G43S5EP2FOBTPMFDDRATMQ5A5CNFSM4KOQGGS2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IKJPKPQ,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGFF33F2IE4RF4JRAGLYPX3RATMQ5ANCNFSM4KOQGGSQ
.

[Tigwin]

I just disabled port 4000 on the firewall except when i need to access the teslamate service. not great but its a lot less work than the other options.

[adamrutt]

I've used an nginx reverse proxy with vouch-proxy (search on GitHub) for auth. This works fine for me via the tesla browser.

+1 for vouch-proxy bit of mucking around to get set up with nginx but very elegant solution and many choices of identity provider

[marcogabriel]

I stumbled across Authelia a while ago. It looks promising, but I didn't manage to get it up and running. It has a huge list of dependencies what maybe makes it hard to integrate.

https://github.com/authelia/authelia

But there is already a docker image which may be easier to integrate. Need to try it...

https://hub.docker.com/r/authelia/authelia

[skyfox14]

I'm using Cloudflare Access. Very easy to setup and free for 5 users.

[tacotran]

After having a bad time accessing the BasicAuth apache setup (just logging in is a PITA) I played around a bit and set up a basic login page via html. It doesn't differ from the BasicAuth setup too much.

You just need mod_auth_form and a basic html login page.

[rtega]

I'm using https://username:password@hostname:port/ in the webbrowser of my tesla. It works like a charm. This is in a tesla model 3. Maybe this only works when you have SSL setup properly.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.