Oauth?

[stevenbaert]

Hi,

Fantastic project!

The only thing stopping me from fully adopting it is the security aspect. Perplexity supports user settings and OAuth. It would be great if Perplexica offered similar features! This way, I could place it behind my reverse proxy and access it securely from anywhere only offering oauth (avoiding brute force password attempts) 😁

Looking forward to your thoughts.

Kind regards,
Steven

[papiche]

Facing the same problem,

Perplexica runs in my LAN, but "no access control" is made, so I cannot open this service to the Web.
I solved it with a trick : allowing ssh reverse tunnel from my users (which public key is placed in ~/.ssh/authorized_keys)

Then this script is run by remote users to get access to Perplexica

#!/bin/bash

echo "Looking for already open tunnel"
tunnelPID=$(lsof -i :5000 | grep ssh | xargs | cut -d ' ' -f 2)
[[ ! -z $tunnelPID ]] && kill -9 $tunnelPID && echo "5000 port found"
tunnelPID=$(lsof -i :3001 | grep ssh | xargs | cut -d ' ' -f 2)
[[ ! -z $tunnelPID ]] && kill -9 $tunnelPID && echo "3001 port found"

echo "Reverse Tunnels"
echo "Perplexica"
ssh -fN -L 5000:127.0.0.1:3000 me@myIP -p 22222
echo "Perplexica API"
ssh -fN -L 3001:127.0.0.1:3001 me@myIP -p 22222

xdg-open http://127.0.0.1:5000

NB: activate fail2ban & forward port 22222 to 22 on LAN router

[bpawnzZ]

Setup cloudflare "ZeroTrust/SafeAccess" for access control.. You can setup Oauth through github or google. i been using this to secure my services for probably 2 years now. as long as you are logged into said account its invisible essentially. It reallly is the perfect solution for what you are asking for

directly behind that login is Perplexica. This form of Oauth can be used to protect any service you like however. Its a good robust solution to use for alof of services. Not just Perplexica.. its worth knowing

[bpawnzZ]

Your done with the Oath part. as long as you get the ZeroTrust login and you can successfully login and it redirects your done with cloudflare. However you will need to rebuild project setup correctly with your reverse proxy. I posted about a month ago how to setup with Traefik and responded to someone yesterday about how to setup with NGINX. Let me know if you cant figure it out.

Traefik Link

Nginx Link

[stevenbaert]

Don't get that. Via the nginx internal proxy address Perplexica works.
But then you have no oauth of course. That's why I was looking for Cloudflare.

Why would you use proxy if you have Cloudflare? My Perplexica page does load only not fully (hangs since it cannot reach something).

[bpawnzZ]

Try setting up the settings for perplexica when you first have the page load. input base_url mdoel etc. save and reload.

[stevenbaert]

Thanks but again no clue what you mean.

[fakebizprez]

@stevenbaert what he means is you don't need a reverse proxy if you're using Cloudflare because you can just use a Cloudflared Tunnel.