[Feature Request] Add a way to disable HOMEPAGE_ALLOWED_HOSTS

[janek202]

Description

I don't expose homepage outside of my LAN and I use tailscale for external access.
In such cases HOMEPAGE_ALLOWED_HOSTS doesn't seem to give any extra security, just another complication in setting it up.
Now I need to make sure all the IP, mDNS and tailnet addresses are included in the setup.

Please add a way to disable it (maybe even by default), or accept something like 'all' or a '*'

Or maybe I'm missing something important?

Other

No response

[iFedix]

Ye I'd like the option to disable this flag as well please. I have tons of IPs (also Dynamic ones, how can i set them?) to set and i personally solved the security issue by putting the container behind a nginx proxy with basic authentication. So this option to allow some hosts only is useless to me and something more to setup and mantain..

[mgrimace]

Agreed, this should only be necessary if reverse proxying. I run homepage local-only as well and it seems to be an added annoyance. I had to go in and add homepage's own IP:Port which seems like a bug to me as a novice.

[KaiKamakasi]

agreed, I don't expose my device at all so this is an entirely unnecessary step for me. I can't even seem to fix it either, no matter what IP/port I add, I can no longer access the homepage from any device on my network

[shamoon]

#4967

[github-actions[bot]]

This discussion has been automatically locked since there has not been any recent activity after it was closed. Please open a new discussion for related concerns. See our contributing guidelines for more details.