I am wondering if there is a way to get rid of this message and the subsequent scrolls and clicks required to eventually access Node-red ?
I know it’s not strictly a Victron issue but as in my case Node-red is part of Venus Large and hosted on the cerbo, I’m hoping someone here has a solution. I used to open Node-red through the VRM/venus OS large menu but since about a year ago it only stays connected for maybe a day so I started using the IP address which generally stays connected indefinitely but when I do need to reconnect for whatever reason, it is the same rigmarole with the warnings and such. It actually says “back to safety !” as an option which is incredibly infantilising.
I don’t fully understand the mechanisms behind all this but is there a way to get rid of this at least for access on my home network ? I believe it’s to do with an ssl certificate missing; can I just get one from somewhere ? I’ll pay. Like I said, I don’t understand very well the mechanisms but every 20 seconds lost in life, repeatedly, for nothing really, is a terrible waste.
I am using the IP of the Cerbo on local network, plus port, 192.168.1.41:1881.
I basically want Node-red to be accessible on my local network without any security warnings or scrolls or additional clicks required, i.e. I type in the IP address/port number and it opens the page, as simple as that. It seems from what I have read that if the cerbo had an SSL certificate then it would work or am I barking up the wrong tree ? Then again, the remote console opens without problems or warnings. Also, my car charger (on the same network) opens directly that I input the IP and press return. Sorry if I sound confused, it’s because I am.
I actually use the workspace as a dashboard but if an actual dashboard would solve the problem then I can create one.
The issue is that modern browsers do not trust self signed certificates, nor https connections when connecting via any other address than what the CA issued it too (e.g. C-NAME or IP).
When you connect via VRM’s proxy, all certificates check out.
You can probably fix it by standing up a reverse proxy, and getting a CA issued certificate for that address. You can automate free certificate with Let’s Encrypt. Or going via a tunnel, such as Cloudflare Zero Trust that will handle the certificates for you.
@Diederik I have a screen in my kitchen which is often restarted while I do various things and each time I need to re-do the security thing to reopen Node-red.
@deon.korb All those suggestions seem above my pay-grade. Is it possible to get a certificate from Victron ?
Is it possible to access Node-red via http (so no cert required) ? It doesn’t work when I try it that way but maybe there is a way.
My guess it that Victron will not address this. They officially support secure access via VRM and if you want local, you must do it yourself. Understandable.
You might be able to access it on http if you set your GX security to unsecured (with all the expected drawbacks…):
Yes I would happily use the VRM route but it doesn’t stay connected for very long any more which means I still end up wasting time, but that explains why they aren’t going to give out a certificate.
Looking at the settings menu on my cerbo I don’t have the same options. Maybe I need to update Venus ?
