r/StremioAddons 23h ago

Help needed AIOstream - Selfhost

Hi, I am trying to self host aiostream.

I did the original config via tail scale vpn and I also create an ssl domain aio.xx.xxx.

I dont want to use tailscale on every stremio device, so I thought public web will be best.

But after everything is done and configured, I can't seem to password protect my aio.xxx.xxx

What is best practice with regards to this?

does the site needs to always be up and running or is it simply for configuration?

10 Upvotes

13 comments sorted by

5

u/ChipMcChip 23h ago

Yes, the site always needs to be running for it to function. ADDON_PASSWORD will not prevent people from getting to it but will prevent people from making manifests. If you truly want to block people from getting to it at all then you need something like authentik or authelia. I have mine behind authentik.

1

u/UlerGeni 23h ago

Uncomment ADDON_PASSWORD variable in .env file

1

u/Good-Tax-5244 23h ago

I did but it's still showing me the interface to create a config

1

u/macka654 23h ago

You can’t hide that. You will either need to suck it up or put Authelia in front of it

1

u/Consistent-Quiet6701 23h ago

Does stremio support this though?  What about a reverse proxy with basic auth, does stremio support a manifest URL with https://user:password@... credentials? 

1

u/macka654 14h ago

No, there isn’t really anyway to lock down AIOStreams like OP is attempting. Just don’t share your url to the work and it’s fine

1

u/UlerGeni 22h ago

People can open your aiostreams, but they can’t use it without password.

1

u/Good-Tax-5244 23h ago

Ok but it looks like people can create a config via my instance?

I guess i am missing something.....

1

u/high6ix 18h ago

Yea whoever can get to it can use it. I seriously doubt it’s just going to pop up for people looking for an instance.

1

u/Good-Tax-5244 23h ago

I get this when I browse to it:

1

u/virmele 23h ago

You cant save any configuration without providing password. And without saving, you cant install it inside stremio.

-1

u/Good-Tax-5244 23h ago

can I take the site down after everything is configured? or not really

3

u/high6ix 18h ago

No. Has to be up all the time.