Installation defaults to completely open redis server

MeasureOSS / Measure

At its core Measure is, for lack of a better term, a contributor relationship management system. Measure consists of easy to understand widgets that can be arbitrarily displayed to build dashboards. It allows you to understand how people as individuals and as organizations are interacting with open source projects on GitHub. It’s metrics that focus not only on code, but on contributors.

Apache License 2.0

159 stars 17 forks source link

Installation defaults to completely open redis server #89

Closed ralight closed 6 years ago

ralight commented 6 years ago

It appears as though the installation instructions end up with an unsecured redis server facing the internet. I tried playing with it briefly on my bitfolk vps yesterday before realising I needed more space. I got an email about an unsecured redis server this afternoon.

I presume this is really an issue for the ghcrawler docker container, but I haven't looked into it and thought it was worth mentioning here anyway.

jeremy-lq commented 6 years ago

This is a ghcrawler issue. It's something we noticed as well. I'd recommend opening an issue for it, as exposing redis in this manner certainly isn't desirable.