authentication: false still forces the login screen

[cdaringe]

problem

the config and start script yields the following issues:

• login screen still required upon visiting http://localhost:8080, even with authentication: false
• 🐇 Configuring Speedtest Tracker... /entrypoint: 11: [: sqlite: unexpected operator
• ...and i cannot put the db in /app, because php says app is not a permitted dir, thus i put the db in /var/www/html/db`, as shown below

---
authentication: false
influxdb:
  enabled: false
  version: 2 # Only InfluxDB2 is supported right now
  url: "http://your-influxdb-instance" # Full url to your InfluxDB instance, sometimes this includes a port number
  org: "" # Organization name, usually created when you installed InfluxDB
  bucket: "speedtest-tracker" # A name location to store the speedtest data in
  token: "" # This is your API token
notifications:
  channels:
    discord:
      webhook_url: null # Set as null to disable
    slack:
      webhook_url: null # Set as null to disable
speedtest:
  enabled: true
  schedule: "*/30 * * * *" # every hour
  ookla_server_id: null # specify a server ID to use a specific server
tz: "UTC"

// start.sh
set -exo pipefail
docker run -it --rm --name speedtest-tracker \
  -p 8080:80 \
  -e "PHP_POOL_NAME=speedtest-tracker_php" \
  -e "DB_CONNECTION=sqlite" \
  -e "DB_DATABASE=/var/www/html/db/database.sqlite" \
  -v $PWD/app:/app \
  -v $PWD/db:/var/www/html/db/ \
  ghcr.io/alexjustesen/speedtest-tracker:latest

[alexjustesen]

Hey @cdaringe I'm aware of a couple issues right now regarding file permissions. Should have it fixed over the weekend.

Separately that auth config does nothing right now, so auth is required when accessing the panel. Default login is in the docs.

[cdaringe]

Rad thanks! 👍

[alexjustesen]

@cdaringe so I don't leave you hanging just a quick update and question.

I've got this on the back burner for the time being as notifications and authorization to some features rely on the authenticated user. Do you mind explaining your use case for disabling auth?

[cdaringe]

Sure! I have this deployed essentially on an Intranet for which the user, if they can even access the thing, is already privileged enough to use the application. I don’t want a redundant authentication system for something for which the user has already authenticated.

[cdaringe]

It’s my presumption that authentication setting, as provided here, is for accessing this very application, not some downstream service associated with a speed test. If I need to authenticate with the Speedtest provider themselves, that’s fine, but it’s my presumption that Speedtest access is open and that authentication here is for this application not the underlying speed test implementation application.

[karan]

+1. Quite a few homelabs run services behind SSO (or even basic auth provided by something like Authelia). So the ability to disable auth in speedtest would be great to have.

[alexjustesen]

This is still planned and captured in the docs but closing the issue for now