What is this error? "WARN [http server] route GET /v1/publicip/ip is unprotected by default"

[aries223]

Can someone explain this warning please?
I've looked up the control-server.md authentication doc, but still a little unclear as what to do..

2024-09-27T19:36:14Z INFO [http server] 200 GET /ip wrote 250B to xxx.xxx.xx.xxx:43560 in 36.367µs
2024-09-27T19:47:34Z WARN [http server] route GET /v1/publicip/ip is unprotected by default, please set up authentication following the documentation at https://github.com/qdm12/gluetun-wiki/setup/advanced/control-server.md#authentication since this will become no longer publicly accessible after release v3.40.

[Arelius-D]

@aries223 you got any respond?

I have something similar I think..

also the link from the loggs doesn't work..

[Arelius-D]

Question is, will he even notice this?

[aries223]

@qdm12
Please reveiew this thread..

[aries223]

Hello, some review on this error is needed please

[qdm12]

Hello there, sorry for the delay seeing this; I don't have notifications turned on due to the high number of issues/discussions and being the only maintainer.

...and the log warning is telling us to use it. If we dont need it, and its not required, why warn the we need to use it?

That warning is only logged IF you access the /v1/publicip/ip route so you are using the control server. The Wiki link is fixed in e93fd19 - my bad, and thanks @frepke for pointing in the right direction!

Can you please add a clarification to the Docs page that it is not a required configuration and that we can safely ignore the warning?
If that is actually not the case, then please add a clarification in the doc page as to what the control server is, why we need to use it, and what will happen if we dont..

Re-read please. From next release, it will be compulsory and so you won't be able to access the /v1/publicip/ip route anymore without authentication. So you can't really safely ignore the warning unless you enjoy having your setup randomly broken after a Gluetun v3 image upgrade.

Also I have no idea what is accessing that /v1/publicip/ip route, it must be one of the connected containers I guess. This is especially showcasing why authentication is important, given (for example) you don't actually know what connected container you have is using the Gluetun control server.