AllBugsFeaturesChangelogSearchNew post
Sign in with Fluxer
Features

Support for Isolated / Air-Gapped Environments

(#1150) Feature Shipped privacy self-hosting
by RexSystem edited originally by @Tander on GitHub

Problem

Currently, the application makes outbound network calls to external internet resources during runtime (for example, https://api.pwnedpasswords.com/range/$%7BhashPrefix%7D). When deploying this application in a restricted environment—such as behind a strict corporate firewall, within a high-security air-gapped network, or in a region with limited global internet connectivity—these outbound requests fail.

Proposed solution

I would like a dedicated "Isolated Mode" (or "Offline/Air-Gapped Mode") configuration option. When enabled, the application should adhere to the following constraints:
  • The application must not attempt to make any HTTP/HTTPS requests to domains outside of its own local host or internal network.
  • Fully Self-Contained Assets (fonts, icons, and CSS libraries)
  • JavaScript dependencies fully vendored/bundled at build time.
  • Automatic version checking, crash reporting, and anonymous usage statistics are disabled or bypassed silently without causing errors in the logs.
  • If an external resource was accidentally requested, the application should fail instantly (connection refused) or skip silently rather than hanging the UI thread waiting for a TCP timeout.
Setting this mode via ENV variable would be the best.

Merged posts

These posts were merged into this one. Their comments are now part of the conversation below, marked with where they came from.

Merged from #1117 No External/Offline/LAN-only mode

RexSystemoriginally by @ghost on GitHub

Report details

Problem

Fluxerapp should have an option to NOT to make any internet connection and serve only for localhost/LAN-only clients for security reason.

Proposed solution

Setting no_internet: true stop any external phone-home connections and serve only localhost/LAN clients.

1 comment

Sign in with Fluxer to comment and vote.
Comment by @burn2theground
RexSystem 1 vote Merged from #1117 originally by @burn2theground on GitHub
This could be really cool. Have it like (use last confirmed identity as user info), or allow an "offline name".... Not sure how connecting would work. Maybe you could create temp lan-only calls, or use some kind of local discovery method to find each other and sync available call rooms/direct call.
Permalink