node-red.github.io icon indicating copy to clipboard operation
node-red.github.io copied to clipboard

Internet security warnings needed

Open TotallyInformation opened this issue 1 year ago • 0 comments

Please add a security warnings getting started and installing sections not to expose Node-RED to the Internet without suitable precautions including:

  • MUST use TLS (HTTPS)
  • MUST have a login with strong passcode for the Editor
  • MUST run Node-RED under a dedicated, separate OS user
  • MUST NOT have default id's and passwords on the Node-RED server (especially Pi's)
  • SHOULD avoid exposing the Editor to the Internet directly, SHOULD use a trusted security proxy such as Cloudflare Zero Trust, NGROK, etc.

TotallyInformation avatar Jul 14 '24 11:07 TotallyInformation