ITADN

How to "bypass" Umbrel's Auth to allow machine-to-machine comms?

#2113OpenDavidGarciaCat 创建于 2026-04-12
D
DavidGarciaCatcommented
Hello, Long story short, I am implementing a Homepage (https://gethomepage.dev/) for my LAN, so it can be used as a Start Page when anyone at home opens a new browser tab. However, I am facing several blockers trying to connect Homepage Widgets to my running Umbrel Apps to get some metrics. Examples: - Pi-Hole to know how many requests have been blocked - Portainer to know how many containers (including Homepage) are running "outside of the Umbrel Apps Store" - Any other widget that I have not yet tested, although it may include: Authentik, Gitlab, Glances, Home Assistant, Immich, Plex, Tailscale, Traefik, Trilium, Uptime Kuma, Wg-Easy and Zabbix (assuming I didn't miss any potential integration) Given that most of the Umbrel Apps from the App Store don't seem to include the `PROXY_AUTH_ADD: "false"` environment variable in the `app_proxy`, every time I try to run a LAN-based machine-to-machine connection, I end up facing a `302 Found` redirection to the Umbrel Home's IP address + port 2000 Although I really understand the need for having a protected environment (as I am part of the security team where I work), the truth is that this is overtaking other apps' responsibility to authenticate and authorise their own connections. Umbrel OS works very well for a plug-and-play experience, but not having a way to disable built-in Auth mechanisms may become a huge problem at some points. I don't want to do it, but I am really tempted to end up installing a completely new OS in my Umbrel Home (and losing the WebUI) if this is the only option to get rid of the current Auth mechanism. Please advise,
1 条评论