Allow changing the user session timeout?

[CodeFinder2]

Hi!

is it possible to change the following somehow through the addon config or can it be added in a future release?

https://github.com/BookStackApp/BookStack/blob/16d8a667b164b60623785ab89f8a1db41fd8b680/.env.example.complete#L69

BookStacks only runs locally, so I would like to extend the session timeout as much as possible because I don't want to login over and over again. :-) (Or is it even possible to disable the login somehow?)

Follow up question; isn't it possible to add BookStack as an iframe? Like (configuration.yaml):

panel_iframe: 
  bookstack:
    title: BookStack
    icon: mdi:wikipedia
    url: http://home:2665/

Thanks!

[CodeFinder2]

@sinclairpaul Thanks for that feature! :-)

Did you read my follow-up question regarding the iframe? I am getting this error (in Chrome, similar in Firefox):

Refused to frame 'http://hassio:2665/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

Is this fixable?

[sinclairpaul]

Sorry I missed it, I will take a look at the config again.

[sinclairpaul]

Please take a look at https://www.bookstackapp.com/docs/admin/security/#iframe-control

I'm assuming the hostname you access HA on, and the iframe link are the same (i.e. hassio)

[CodeFinder2]

Ahh great, I totally missed that option! Will try and report back once I see the addon upgrade being available in my supervisor panel. :-)

Thanks!

[sinclairpaul]

You can click the three dots on the Addon Store page and reload :)

[CodeFinder2]

Oh, another thing I learned / didn't know yet - thanks once more! :-)

Unfortunately, it's not working. This is my addon config:

envvars:
  - name: ALLOWED_IFRAME_HOSTS
    value: 'http://hassio:2665'
ssl: false
certfile: fullchain.pem
keyfile: privkey.pem

And this is my iframe entry in configuration.yaml:

bookstack:
  title: BookStack
  icon: mdi:wikipedia
  url: http://hassio:2665/

I am getting the same error message. Also tried without the trailing slash and the port but still doesn't work. Do you know what's wrong here? Does it work in your tests?

[sinclairpaul]

It would likely be just the host, i.e.

http://hassio

If it still fails can you open another issue and will take a look

[CodeFinder2]

Also tested, among other combinations. Didn't work for me.

Will open a new issue, as requested. ;-)