From e64f5f8ed91f762f614d556854e6e75060fb94c5 Mon Sep 17 00:00:00 2001 From: alexbelgium Date: Sun, 11 Oct 2026 14:09:44 +0200 Subject: [PATCH] joplin_desktop: admin-only panel; steer direct access to https/ingress in README Co-Authored-By: Claude Opus 5.5 --- joplin_desktop/README.md | 4 ++-- joplin_desktop/config.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/joplin_desktop/README.md b/joplin_desktop/README.md index c81cae330a..c860ecdadb 100644 --- a/joplin_desktop/README.md +++ b/joplin_desktop/README.md @@ -39,7 +39,7 @@ Only amd64 is supported, because Joplin does not publish a Linux arm64 build. ## Configuration -Webui can be found with ingress or at (or ). The ports are disabled by default and can be enabled in the add-on network settings. If you open a port, set `PASSWORD`: the web interface then asks for user `abc` and that password. +The recommended way in is ingress (the sidebar panel). You can also enable the https port 3001 in the add-on network settings and open ; the browser streaming features need HTTPS, so do not use the plain http port 3000 directly — it is only meant to sit behind your own TLS reverse proxy. If you open a port, set `PASSWORD`: the web interface then asks for user `abc` and that password. This basic authentication is only suitable on a trusted local network; for access from the internet use a reverse proxy with stronger authentication. Joplin's profile (notes, settings, plugins) is stored in `data_location`, by default `/config/data`, which is the add-on's own folder under `/addon_configs/` on your Home Assistant host. It is kept across restarts and updates and included in backups. @@ -50,7 +50,7 @@ PUID: 1000 # user id of the desktop user and owner of the data folder PGID: 1000 # group id of the desktop user TZ: Europe/Paris # timezone, Country/City according to https://manpages.ubuntu.com/manpages/trusty/man3/DateTime::TimeZone::Catalog.3pm.html KEYBOARD: fr-fr-azerty # keyboard layout -PASSWORD: "mypassword" # basic authentication on the web interface (user abc). Recommended if you open a port +PASSWORD: "mypassword" # basic authentication on the web interface (user abc). Set it if you open port 3001; trusted local networks only DRINODE: /dev/dri/renderD128 # GPU device used for rendering and encoding, if the default does not work data_location: /config/data # where Joplin's profile is stored; must be in /config, /share, /data or /mnt additional_apps: "" # comma-separated apt packages to install at every start (not persistent otherwise) diff --git a/joplin_desktop/config.yaml b/joplin_desktop/config.yaml index 546c18feaa..778b90b2e2 100644 --- a/joplin_desktop/config.yaml +++ b/joplin_desktop/config.yaml @@ -68,7 +68,7 @@ options: data_location: /config/data keyfile: privkey.pem use_own_certs: false -panel_admin: false +panel_admin: true panel_icon: mdi:notebook-edit ports: 3000/tcp: null