Inspector 0.9.2: settings validation, sign-in hardening and other fixes
This commit is contained in:
1 parent
284ba2ea15
commit
b4da527732
7 files changed
+273
-61
No files matched your search
@@ -91,7 +91,8 @@ and that socket is effectively root on your server. So:
|
||||
|
||||
- Keep the dashboard on your home network, or put it behind a VPN or a reverse
|
||||
proxy with authentication. Don't expose port 8080 to the internet.
|
||||
- Use a real dashboard password.
|
||||
- Use a real dashboard password. Repeated failed sign-ins from one address are
|
||||
blocked for a few minutes.
|
||||
- Inspector itself runs as an unprivileged user; it starts as root only to detect
|
||||
the socket's permissions and fix ownership of its own folders.
|
||||
|
||||
|
||||
Reference in new issue
Block a user