General

Server binding and basic configuration

Listen address
Currently: —
—
Port
—
mDNS broadcast
Advertise as imodelserver.local
TLS / HTTPS
Encrypt traffic with TLS certificate
—

Allowed Hosts

No hosts configured (default: localhost + imodelserver.local)

Security

Network security and auto-block settings

Trusted Networks

Clients from these CIDR ranges get reduced-friction login. Each request still validates source IP (Home Assistant model). Requires HTTPS enabled.

No trusted networks configured

Auto-block

Block IPs after too many failed login attempts (DSM-style).

Failed attempts threshold
5
Time window
5 minutes
Block duration
1 hour

Sessions

Active sessions across all devices

Active sessions

Loading...

Admin Keys

Scoped API keys for CLI and third-party integrations

Your admin keys

Loading...

TLS Certificate

Server certificate and fingerprint

Loading...

Remote Access

Access your server from outside the local network

Recommended: Reverse Proxy

Set up a reverse proxy (Caddy / nginx / Tailscale serve) in front of iModel-Server for production remote access. The proxy terminates TLS and forwards to the local port.

Caddy example
imodel.example.com { reverse_proxy localhost:8788 }
nginx example
server { listen 443 ssl http2; server_name imodel.example.com; ssl_certificate /etc/letsencrypt/live/imodel.example.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/imodel.example.com/privkey.pem; location / { proxy_pass http://localhost:8788; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } }

Alternative: Tailscale Serve

If all clients are on the same Tailscale network, use tailscale serve for zero-config HTTPS.

tailscale serve --bg 8788

Alternative: Cloudflare Tunnel

For public internet access without port forwarding, use Cloudflare Tunnel.

cloudflared tunnel --url http://localhost:8788