password protection

nihil.baxter

Hello everybody.

Been reading the forum for a while now, now i gotta ask a question.

I hope this is the right place for it. I looked around here and with google and to my surprise found nobody asked for it before.

I very much enjoy the runeaudio distribution on my rpi3 with my hifiberry dax+, pretty impressed about how easy it is to setup.
But what flaws it a bit for me is the lack of security options.
Why isn't it possible to password protect the remote connection? Everybody in the same network can access my runeaudio and mess around with it, which isn't practical at all in my setup and living situation. Did i miss something? Is there a possibility? The mpd has the feature afaik, but not runeaudio?
Another thing is the airplay function which i would like to use, but the problem here is the same as above, i dont want everybody in the house to be able to hitchike my audio by just turning into airplay.
So, if there are possibilities to do it, please, somebody let me know, otherwise this is a feature request

hondagx35

Hi nihil.baxter,

- go to http://www.htaccesstools.com/htpasswd-generator/ and generate a htpasswd entry.
- create the file /etc/nginx/.htpasswd and enter the above generated line

runeaudio:$apr1$sCspRol7$wSurYpBpaajRoDlN4cW2o/

This is an example for user: "runeaudio" and passwd: "runeaudio"
- modify /etc/nginx/nginx.conf by adding <auth_basic "Restricted";> and <auth_basic_user_file /etc/nginx/.htpasswd;>

    # DISPLAY section [/]
    server {
        listen 80 deferred;
		add_header X-UA-Compatible "IE=Edge,chrome=1";
        access_log  /var/log/runeaudio/runeui_access.log;
        
        location / {
            root   /var/www;
            index  index.php index.html index.htm;
            try_files       $uri /index.php;
            auth_basic "Restricted";
            auth_basic_user_file /etc/nginx/.htpasswd;
        }

- restart nginx or reboot.

Password protection for airplay comes with next version (update to shairport-sync).

Frank

nihil.baxter

Ok, thanks alot for the quick and precise help.

I followed the instructions, seems to work somehow, but now i can't access the runeui at all.
There is no login window popping up, just the browser saying that it cannot connect to that specific ip.
I just saw that nginx brings up an error message "nginx: [emerg] unknown directive "auth_basic" in /etc/nginx/nginx.conf:43"
Any idea? I double checked the lines being written exactly as mentioned and being at the right position...

(I'd also like to set the password in mpd, is there a way tu put the needed line in /etc/mpd.conf so that it stays there?)
->It worked to just add the line, just hadn't thought about that runeui can't be used then anymore

and a bit sad that i cant use the mpd configuration part of runeui anymore.
But since i prefer those mpd clients, i'll do it that way.
Why isnt the mpd password function implemented in runeui? Seems like a nobrainer to me, since its seems like an easy thing to do.
Again, a feature request, so that the thread is still in the right subforum

The question about the webserver not being reachable with the .htaccess active, is still of interest.

hondagx35

Hi nihil.baxter,

I just saw that nginx brings up an error message "nginx: [emerg] unknown directive "auth_basic" in /etc/nginx/nginx.conf:43"
Any idea?

Your conf file is not setup correctly. http://nginx.org/en/docs/http/ngx_http_auth_basic_module.html

: password.jpg (38.19 KiB) Viewed 4585 times

Works with chrome, firefox and IE on my system.

Frank

nihil.baxter

Hello again.

Your conf file is not setup correctly. http://nginx.org/en/docs/http/ngx_http_ ... odule.html

Sure, i thought so.
I did it exactly like explained before. The part in that nginx.conf looks like this and i'd say it looks exactly right from the little knowledge and understanding i got after reading a bit in the nginx documentation (and exactly the same as explained before):

 # DISPLAY section [/]
    server {
        listen 80 deferred;
                add_header X-UA-Compatible "IE=Edge,chrome=1";
        access_log  /var/log/runeaudio/runeui_access.log;

        location / {
            root   /var/www;
            index  index.php index.html index.htm;
            try_files       $uri /index.php;
            auth_basic "Restricted";
            auth_basic_user_file /etc/nginx/.htpasswd;
        }

        location ~* (.+)\.(?:\d+)\.(js|css|png|jpg|jpeg|gif|ico)$ {
           try_files $uri $1.$2;
        }

hondagx35

Hi,

please try this file:

nginx.zip: (1.58 KiB) Downloaded 782 times

Frrank

nihil.baxter

Hi,
thanks again for your efforts, but it still doesent work out, behaves the same way as before. Since i havent got the time right now (and honestly: nerves

i am useing that modification posted in the raspberry subforum as it just works right now. But since your suggestion seems like a nice and elegant way i still find it a bit sad that i couldnt make it out. Well at least i learned a very little bit about nginx webserver

handicop

If your nginx isn't built with needed modules, then it would not allow you to use auth_basic function.
I recently download the latest version on Raspberry Pi 2, and the nginx comes without http-auth-basic module.

cd /usr/bin
./nginx -V

if the result contains these text message, then you would not be able to use auth_basic function with the nginx you have

--without-http_access_module --without-http_auth_basic_module