Seperate WebUI port

[LordRatner]

Hi everyone,

I was wondering if someone knew how to do this, or if this is really a feature request.

As I understand it, both the GUI and backup process go through port 8007. The problem I have with that is that I would like to restrict access to the WebUI to LAN computers while still allowing off-site remote PBS instances to connect and sync.

If the WebUI was on a separate port, this would be easy. However with both sharing 8007, I do not know a way to allow access to the interface on LAN hosts but not WAN hosts, but still allow sync access to both LAN and WAN hosts.

If not possible, does it make sense as a feature request?

Thanks!
Seth

 

[Dunuin]

From a security standpoint that shouldn't make big difference. Backups are using the same port, as that is also used by the API. All you can do with the webUI you can also do using the API. So even if that webUI wouldn't be accessible from the internet, all actions could still be done using the API.

If you want additional security you could create two local networks, only let PBS use that and then connect both using a site-to-site VPN tunnel.