mirror of
https://github.com/actualbudget/actual.git
synced 2026-07-16 07:04:23 -05:00
[GH-ISSUE #637] SharedArrayBuffer and HTTPS #97678
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/actual#97678
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Marcus-Schubert on GitHub (Feb 5, 2023).
Original GitHub issue: https://github.com/actualbudget/actual/issues/637
Hey there,
I'm currently running actual server in a local network on HTTP via Docker. Since the latest update (23.2.5), I get the SharedArrayBuffer info page and can't access my actual server instance.
When looking into the documentation, it says that actual requires SharedArrayBuffer and that HTTPS is required for SharedArrayBuffer.
Does this mean, actual server will no longer work with HTTP but only HTTPS?
@j-f1 commented on GitHub (Feb 5, 2023):
Except when you’re running on localhost, we do require HTTPS now. This is a limitation imposed by browsers — things appeared to work OK in the past but our database layer had bugs when
SharedArrayBufferwasn’t supported, resulting in budgets being merged if you had multiple files, and probably other issues too.@Marcus-Schubert commented on GitHub (Feb 5, 2023):
Thank you for the quick response. I guess I will switch to HTTPS now 👍
@hofq commented on GitHub (Feb 6, 2023):
@j-f1
Edit: My first comment is obsolete (i think) because i haven't looked into this enough.
Could you make configuration via Environment Variables Possible? At least the HTTPS one since you can't add specific files to an Unraid Deployment unless you rebuild the image. Alternatively 2 Seperate Ports, like some other apps do, would also be fine for me
@j-f1 commented on GitHub (Feb 6, 2023):
Yep! In the latest version (not tagged yet, but you can use
edgefor now) you can specifyACTUAL_HTTPS_KEYandACTUAL_HTTPS_CERTenvironment variables with the path to the key or the key content itself. See the updated config docs which will hopefully be merged soon@hofq commented on GitHub (Feb 7, 2023):
Does it automatically generate self signed certs or do you have to do it yourself?
@j-f1 commented on GitHub (Feb 7, 2023):
You’ll have to do that yourself (partially because we didn’t implement that functionality, partially because I don’t want people to get used to clicking through certificate errors). It might be nice to have a tool to do that automatically somehow though!
@MatissJanis commented on GitHub (Feb 9, 2023):
We have added a way to bypass this error in version 23.2.9. Please use it at your own risk.
@Presjar commented on GitHub (Mar 7, 2023):
I use traefik2 to generate certificates for each of my services. Is anyone else using traefik for similar so they can access for example https://actual.foobar.com ? I could see that enabling https on actual would perhaps conflict with the https of traefik? But to stop the SharedArrayBuffer issue I need to enable https in Actual?
@j-f1 commented on GitHub (Mar 7, 2023):
You don’t need to enable HTTPS in Actual itself, as long as you have something adding HTTPS between you and the server.
@Presjar commented on GitHub (Mar 7, 2023):
Oh great! This should work easily then!
Thanks for letting me know.
On Tue, 7 Mar 2023, 10:51 pm Jed Fox, @.***> wrote: