ParisNeo / lollms-webui

Lord of Large Language Models Web User Interface
https://lollms.com
Apache License 2.0
4.36k stars 551 forks source link

Forbidden functionality if server is exposed #571

Open carloalbertogiordano opened 6 days ago

carloalbertogiordano commented 6 days ago

Expected Behavior

Adding the option --host 0.0.0.0 should expose the service on the local network

Current Behavior

Adding the option --host 0.0.0.0 thrown an exceprion 'this functionality is forbidden if the server is exposed'

Steps to Reproduce

Start the linux_run.sh script with option --host 0.0.0.0

Possible Solution

Context

OS: Ubuntu Server 24.04

Screenshots

immagine

ParisNeo commented 3 days ago

exposing lollm to the network is not advised unless you know what to do. Lollms executes code on the host which can represent a great threat if your network is accessible somehow from unknoiwn sources, that's why by default lollms would only expose the basic services and blocks most other services.

I was intending to unlock this one day when I finish building an authentication system to allow for safe multiuser access. Also, as it is set up now, lollms is a single user app: if someone is generating text or images, no other one can call the system.

You can still override everything by setting this parameter in your configuration file (in your personal folder/configs/local_config.yaml): force_accept_remote_access

But as I said, better wait for an actually multi user lollms.