From 0cf3ae07951b3b2d312b312d26ed0822f42a325d Mon Sep 17 00:00:00 2001
From: Pascal Vizeli <pvizeli@syshack.ch>
Date: Tue, 28 Jul 2020 19:38:39 +0200
Subject: [PATCH] Fix deCONZ issue with old vnc access (#1513)

---
 deconz/CHANGELOG.md                     | 4 ++++
 deconz/config.json                      | 4 ++--
 deconz/rootfs/etc/services.d/deconz/run | 2 ++
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/deconz/CHANGELOG.md b/deconz/CHANGELOG.md
index a3fbbe9..083d5c2 100644
--- a/deconz/CHANGELOG.md
+++ b/deconz/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 6.2.1
+
+- Fix old fashon VNC access
+
 ## 6.2.0
 
 - Enable VNC per default
diff --git a/deconz/config.json b/deconz/config.json
index 34bf46b..ed70bcf 100644
--- a/deconz/config.json
+++ b/deconz/config.json
@@ -1,6 +1,6 @@
 {
   "name": "deCONZ",
-  "version": "6.2.0",
+  "version": "6.2.1",
   "slug": "deconz",
   "description": "Control a Zigbee network with ConBee or RaspBee by Dresden Elektronik",
   "arch": ["amd64", "armhf", "aarch64"],
@@ -19,7 +19,7 @@
     "40850/tcp": null
   },
   "ports_description": {
-    "5900/tcp": "deCONZ desktop via VNC (Not required for Ingress)",
+    "5900/tcp": "deCONZ via VNC (Not required for Ingress. Not secure!)",
     "8081/tcp": "deCONZ WebSocket (Not required for Ingress)",
     "40850/tcp": "deCONZ API backend (Not required for Ingress)"
   },
diff --git a/deconz/rootfs/etc/services.d/deconz/run b/deconz/rootfs/etc/services.d/deconz/run
index f923a54..9d99428 100644
--- a/deconz/rootfs/etc/services.d/deconz/run
+++ b/deconz/rootfs/etc/services.d/deconz/run
@@ -42,6 +42,7 @@ fi
 
 # Run it only on localhost if not expose
 if bashio::var.has_value "${VNC_PORT}"; then
+    bashio::log.warning "Your direct VNC access is not protected!"
     LOCAL_ONLY=no
 else
     LOCAL_ONLY=yes
@@ -57,6 +58,7 @@ tigervncserver \
     -depth 16 \
     -localhost ${LOCAL_ONLY} \
     -SecurityTypes None \
+    --I-KNOW-THIS-IS-INSECURE \
     "${DISPLAY}" \
     &> /dev/null