Hardening TiddlyWiki

#1

Hi, I work as a scientist (group leader and professor) and frequently switch between computers. Syncing bookmarks between browsers works to some extent, but I am looking for a solution for building my own internet start page for all computers; with links to my self-hosted mail client, entry to databases, etc. Of course, it should work on non-mainstream browsers such as suckless surf.

This page should be web-hosted (I got a VPS) and relatively easy to edit.

TiddlyWiki looks like the perfect solution: Easy to install, simple, portable, open.

But how can I harden TiddlyWiki? Not everyone should see my little TODO (talk to student X; reimbursement of Y). Is it e.g. possible to password-protect the Wiki, and only allow access after passing a Login screen?

Thanks and best regards, Robert

#2

Welcome to tiddlytalk, Robert

I am not sure what you mean here.

But a quick answer is to get a private https://tiddlyhost.com/ site if you have internet access most of the time.

Use autosave so changes are always committed so if you open from another device it should be up to date.

If you may be off line a lot, on one particular device, it may make sense to install the local storage plugin, and turn off autosave but make sure you are online and do a full save before changing devices.

#3

Ah that browser; try tiddly host first I expect it to work.

#4

Hi Robert,

You can password protect the whole wiki (from the Control Panel) and/or encrypt individual tiddlers Encrypt Tiddler Plugin — Encrypt single tiddlers

Regards
Jon

#5

Good Morning,
I am hosting tiddlywiki on my shared hosting uberspace.de with nodejs and basic http authentication. This works quite well. The other option which I tried out is hosting it on tiddlyhost if you trust that person of course. But you could also host it on your own WEBDAV and encrypt the file via the passwort option.
Another option could be the private git save otione behind e.g. nginx proxy manager with basic http authentication.

Another option might be other homepage/startpage apps aka personal dashboards GitHub - awesome-selfhosted/awesome-selfhosted: A list of Free Software network services and web applications which can be hosted on your own servers

#6

Welcome!

As mentioned, you will have to decide on your own hosting option, most often a nginx reverse-proxy with either basic-authentication (plain-text user:pass in every request header), or your own implementation of header-based authentication. See: https://tiddlywiki.com/#WebServer%20Authentication