In-browser yaml editor

[VanGoghComplex]

Description

An optional in-browser text editor for manipulating Homepage's various yaml configuration files. Frigate (NVR software) is configured by yaml and has this feature, and it's a huge convenience!

Other

No response

[101br03k]

I use code server container to be honest, I also use it to edit my compose files.

[vednolacni]

Is there any update on this?

[DamitusThyYeetus123]

I'm working on a PR for this, is this still something people are interested in?

[vednolacni]

Yes we are! that would be so nice.

[benphelps]

Without an auth layer, this is very unlikely to happen.

[shamoon]

Yea this sounds like a security problem so unfortunately no it wouldn’t.

[DamitusThyYeetus123]

Could this feature be implemented with being completely disabled by default (API disabled)

[shamoon]

Id have to think about that, but to be honest it still kinda makes me nervous because of the fairly powerful nature of things like the custom widget, one could pretty easily craft something malicious with direct access to the yaml configs. I understand disabling it allows you to say "use at your own risk" but it still feels risky to me.

As an aside, I can tell you're interested in contributing (thanks!) so maybe there's something less controversial (and more popular) you'd be interested in working on? https://github.com/gethomepage/homepage/discussions/categories/feature-requests?discussions_q=is%3Aopen+category%3A%22Feature+Requests%22+sort%3Atop I think you saw me on discord, can always chat there too

[DamitusThyYeetus123]

Yup, could I add you on discord to speak about some things? Primarily around the whole in-browser/in-app editing situation, as this seems to be something which is quite commonly requested, and is missing from homepage especially when compared to similar projects such as dashy. I'd love to figure out a secure way of implementing such a thing.

[DamitusThyYeetus123]

https://github.com/DamitusThyYeetus123/homepage/tree/gui-editor Here is my current implementation, definitely could use improvement, but it covers the basics of editing specifically settings.yaml for now, with the framework for branching outwards later. Could have some server-side checks to disable allowing editing of custom files + enforce env variables when using the in-app editor.