ALL NPPS Members

[Torre Wenaus <wenaus AT gmail.com>]

Very interesting, thanks Brett. OTOH, I don't see any problem exposing a trusted frontend that has a secure connection to an ollama backend. Is that what you would call comanage with ollama behind? Or. . . ? Today has not been very positive

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

Very interesting, thanks Brett.

OTOH, I don't see any problem exposing a trusted frontend that has a
secure connection to an ollama backend.

Is that what you would call comanage with ollama behind? Or...?

Today has not been very positive to Open-WebUI!

  Torre

On Wed, Sep 10, 2025 at 4:02 PM Brett Viren <bv AT bnl.gov> wrote:

Hi Torre,

Ollama has no auth and should never be put on the Internet[1].

Open-WebUI has auth but at least with my use, it loves to forget it has
been set up and will fall back into a first-run state that lets anyone
gain full admin privileges.  I would never put Open-WebUI on the
internet.

Exposing either of these to the internal bnl.gov campus net is maybe
okay, though still not great to do, imo.

OTOH, I don't see any problem exposing a trusted frontend that has a
secure connection to an ollama backend.


-Brett.

[1] Some folks are okay with a more relaxed posture about Ollama.  Maybe
we can use these gracious volunteers instead of buying more GPUs!

  https://news.ycombinator.com/item?id=45113418

--

-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments

-- BNL 510A 1-222 | 631-681-7892