# V6 timeout and HTTPS

**URL:** <https://discourse.pi-hole.net/t/v6-timeout-and-https/76904>\
**Category:** Help\
**Created:** [February 24, 2025, 8:57pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904 "2025-02-24T20:57:06Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![mtadmor](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/e56c9b/32.png) [@mtadmor](https://discourse.pi-hole.net/u/mtadmor)\
**Post date:** [February 24, 2025, 8:57pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/1 "2025-02-24T20:57:06Z")

</div>

#### Please follow the below template, it will help us to help you!

## Expected Behaviour:

I am expecting the previous 7 days sticky login I used to have in V5 and no auto logout of the web interface.  
Also, I do not expect the new message asking to force HTTPs as it was never needed in V5 and I run on my local network

## Actual Behaviour:

As of the upgrade to V6 I observed 2 issues:

1. The Web interface times out / logs me out every few minutes, the option to stay logged in for 7 days no longer appears
2. The browser shows an error that HTTPS is not enabled and my session isn't secured, I run my pihole instance on the local network and never needed HTTPS

## Debug Token:

[https://tricorder.pi-hole.net/Y8txgFvz/](https://tricorder.pi-hole.net/Y8txgFvz/)

---

<div class="post-metadata">

**Author:** ![CallMeCurious](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/c/c4cdca/32.png) [@CallMeCurious](https://discourse.pi-hole.net/u/CallMeCurious)\
**Post date:** [February 24, 2025, 9:03pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/2 "2025-02-24T21:03:56Z")

</div>

The webserver timeout is listed in the /etc/piole/pihole.toml file. Its default is 1800 seconds. You can change the value there.

```auto
  [webserver.session]
    # Session timeout in seconds. If a session is inactive for more than this time, it will
    # be terminated. Sessions are continuously refreshed by the web interface, preventing
    # sessions from timing out while the web interface is open.
    # This option may also be used to make logins persistent for long times, e.g. 86400
    # seconds (24 hours), 604800 seconds (7 days) or 2592000 seconds (30 days). Note that
    # the total number of concurrent sessions is limited so setting this value too high
    # may result in users being rejected and unable to log in if there are already too
    # many sessions active.
    timeout = 1800

```

---

<div class="post-metadata">

**Author:** ![mtadmor](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/e56c9b/32.png) [@mtadmor](https://discourse.pi-hole.net/u/mtadmor)\
**Post date:** [February 25, 2025, 1:37pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/3 "2025-02-25T13:37:01Z")

</div>

Thank you, that helps! Do you know how do I get rid of the HTTPS warning?

---

<div class="post-metadata">

**Author:** ![nero355](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/nero355/32/54774_2.png) [@nero355](https://discourse.pi-hole.net/u/nero355)\
**Post date:** [February 25, 2025, 5:14pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/4 "2025-02-25T17:14:47Z")

</div>

Maybe bind only Port 80 ??

---

<div class="post-metadata">

**Author:** ![CallMeCurious](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/c/c4cdca/32.png) [@CallMeCurious](https://discourse.pi-hole.net/u/CallMeCurious)\
**Post date:** [February 25, 2025, 5:57pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/5 "2025-02-25T17:57:03Z")

</div>

I think the warning is likely just coded into the page to remind people its an unsecured connection. That would be a question for the devs though.

---

<div class="post-metadata">

**Author:** ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)\
**Post date:** [February 25, 2025, 6:13pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/6 "2025-02-25T18:13:32Z")

</div>

Yeah that's correct. I can't remember where I saw it (might be internal), but I saw some discussion around _maybe_ making this warning/message less prominent.

HTTPs is great, but in almost all cases it's overkill on a local (closed) network. Unless you _really_ don't trust the people you live with.

---

<div class="post-metadata">

**Author:** ![nero355](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/nero355/32/54774_2.png) [@nero355](https://discourse.pi-hole.net/u/nero355)\
**Post date:** [February 25, 2025, 6:34pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/7 "2025-02-25T18:34:02Z")

</div>

Since I have got other stuff running with Self Signed Certificates like OPNsense and the UniFi Controller the fact that Pi-Hole v6 has one too was a nice surprise for me 👍

So one of the first things I did was bind it only to port 443 🕶 😁

---

<div class="post-metadata">

**Author:** ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)\
**Post date:** [February 25, 2025, 6:40pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/8 "2025-02-25T18:40:52Z")

</div>

Every time I visit the unifi dashboard I think to myself "I must set up a certificate properly"

And then I find something more interesting to do

---

<div class="post-metadata">

**Author:** ![nero355](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/nero355/32/54774_2.png) [@nero355](https://discourse.pi-hole.net/u/nero355)\
**Post date:** [February 25, 2025, 8:22pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/9 "2025-02-25T20:22:48Z")

</div>

As you should! 😬 👍 👍

IMHO it's not worth the hassle for those few visits per year 😉  
There are some scripts for it online tho if you feel like doing it anyway...

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [March 18, 2025, 8:22pm UTC](https://discourse.pi-hole.net/t/v6-timeout-and-https/76904/10 "2025-03-18T20:22:52Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.