Adding webserver access user/pass

[andriej]

Going through some network-security internally, I can see that currently there's no doable way of securiing access to this addon (so non-VLAN network can have thermostat managed by anyone).

I can see that in .conf file of otmonitor there's space for nopass set to true. I can't find options how it should look like to have at least admin user defined (and allowed in add-on configuration).

Would love to see that feature enabled tho.

Tried looking at source code but I'm not yet familiar enough with TCL

[andriej]

After getting some sleep - the solution was quite simple ;-) I've removed webserver port for otmonitor addon and it fully relies on HA ingess (which is secure enough for me in terms of WWW UI)