ALL NPPS Members

[Brett Viren <bv AT bnl.gov>]

Hi Torre,

Ollama has no auth and should never be put on the Internet[1].

Open-WebUI has auth but at least with my use, it loves to forget it has
been set up and will fall back into a first-run state that lets anyone
gain full admin privileges.  I would never put Open-WebUI on the
internet.

Exposing either of these to the internal bnl.gov campus net is maybe
okay, though still not great to do, imo.

OTOH, I don't see any problem exposing a trusted frontend that has a
secure connection to an ollama backend.


-Brett.

[1] Some folks are okay with a more relaxed posture about Ollama.  Maybe
we can use these gracious volunteers instead of buying more GPUs!

  https://news.ycombinator.com/item?id=45113418

Attachment: signature.asc
Description: PGP signature