Repository navigation
Security
Set these in Lyra under Settings → Remote. They stay on the Lyra computer. Lyra checks them itself. There is no outside authentication server.
The listen address and port stay on Settings → Network.
Accept only these and Refuse these take one full address, or a range written as a prefix.
-
192.168.1.40is one computer. -
192.168.1.0/24is192.168.1.0through192.168.1.255.
A short piece, a star, or a dash range is refused. Separate entries with a new line, a comma, or a space.
Both boxes blank: every address that can reach the port may connect. Any entry in Accept drops every other address before it can hear the radio. An address on Refuse is dropped even when it is also on Accept.
The computer running Lyra is always allowed. A program on that computer keeps its connection.
A valid entry is applied as soon as you leave the box. A refused address never counts as a password try.
Leave the bind address at 127.0.0.1 unless another computer on this network should reach Lyra. Do not forward the TCI port to the internet.
One phrase, 12 to 128 characters. Spaces are allowed. Include a word. A string of only numbers is refused, and so is one character repeated. The callsign alone is refused, and so are password, lyra, letmein, qwerty, and changeme. Type it twice.
Lyra stores a one-way hash. The phrase itself is not kept. Clear password removes the hash. With no password saved, remote transmit stays off.
Five wrong proofs from one address lock that address for 15 minutes. The waits between tries are 1, 2, 4, 8, and 16 seconds. A correct proof clears the count. While an address is locked, Lyra offers it no new proof. Listening for everyone else stays up.
A correct proof receives a session token. It is a long random value held only in memory, and only for that connection. The password is not sent again for each transmission, and it is not put in the address or stored in the browser.
Programs on the computer running Lyra are not asked for the password. A digital program on another computer is not asked either, unless it requests a voice session. This page asks only after Start voice.
Password required to listen is off unless you tick it. The box is saved. Spectrum and receiver audio stay open. The later hold, where spectrum and audio wait for the same proof, is not applied yet.
Lyra Remote is a separate package. The radio is Lyra.