OllamoMUI was built with security as a first-class concern. Every layer — from password storage to API middleware to frontend rendering — includes explicit defense-in-depth measures.
Data Sovereignty & Privacy
OllamoMUI is built on the principle of data sovereignty. All your credentials, conversations, and documents remain on your local machine. The desktop version bundles its own PostgreSQL cluster, so you don't need to trust a cloud provider with your sensitive data.
FeatureImplementationBenefit
Local-First Architecture
Desktop EXE bundles PostgreSQL; all credentials, API keys, and RAG documents stay on the user's hardware.
Full data ownership — no third-party storage.
Localhost Binding
Server binds to 127.0.0.1 by default; LAN access requires explicit configuration.
Prevents unauthorised network access.
Secure API Key Storage
API keys are hashed (SHA-256) and stored in the local database.
Even if the database is compromised, keys are not exposed.
Authentication & Access Control
OllamoMUI implements enterprise-grade identity management. Passwords are hashed using PBKDF2-HMAC-SHA256 with a per-user salt. Role-Based Access Control (RBAC) ensures that only authorised users can perform administrative actions, and session tokens are securely stored in HTTP-only cookies.
FeatureImplementationBenefit
PBKDF2-HMAC-SHA256
Password hashing with per-user random salt and 200,000 iterations.
Resistant to brute-force and rainbow table attacks.
Role-Based Access Control (RBAC)
Admin, User, Guest roles with per-route permission checks.
Fine-grained access — admins can audit logs, users can only modify their own data.
Session Management
JWT with 30-day expiry, HTTP-only and Secure cookies, max 5 active sessions per user.
Prevents session hijacking and abuse.
Network & Infrastructure Defense
The API gateway is protected against Server-Side Request Forgery (SSRF) by blocking private and loopback IP addresses. Rate limiting prevents abuse, and IP filtering allows administrators to restrict access to trusted networks. When SSL is enabled, all traffic is automatically redirected to HTTPS.
FeatureImplementationBenefit
SSRF Protection
Provider URL schemes and IP addresses are validated; private/loopback addresses are blocked.
Prevents attackers from using your server to scan internal networks.
Rate Limiting
Per-user request throttling (configurable via OLLAMA_EMU_RATE_LIMIT).
Mitigates DDoS and brute-force attacks.
IP Filtering
Configurable allowlists and blocklists at the network level.
Restricts access to trusted IP ranges.
HTTPS Redirect
Automatic redirection from HTTP to HTTPS when SSL is enabled.
Encrypts all traffic in transit.
Operational Integrity & Safety
Every sensitive operation is audited with user ID, IP address, and timestamp. File uploads are sanitised and limited to 10MB, and errors are masked to prevent information leakage. A built-in memory monitor automatically cleans up resources when RAM usage exceeds 35%, ensuring stability under load.
FeatureImplementationBenefit
Audit Logging
All mutations are logged with user ID, IP, and timestamp.
Full audit trail for compliance and incident response.
File Upload Safety
Extension sanitisation, random temporary filenames, 10MB size limit.
Prevents file-based attacks and resource exhaustion.
Error Masking
Internal paths and stack traces are never exposed to the client.
Prevents information leakage about server internals.
Memory Monitor
Auto-cleans at 35% RAM usage — graceful degradation under load.
Ensures system stability and resource-conscious operation.