StefanSchubert / sabi

Seawater Aquarium Business Intelligence (sabi) aims to gain knowledge from aquarists for aquarists based on collected seawater parameters.
https://sabi-project.net
MIT License
4 stars 3 forks source link

Secure Actuator endpoints #42

Open StefanSchubert opened 5 years ago

StefanSchubert commented 5 years ago

They shouldn't be open to the world, as they may reveal to much about the environment to a possible attacker.

StefanSchubert commented 4 years ago

If not directly possible, we can use a proxy in between allowing the metric endpoints only locally. BTW grafana/prometheus setup is already in place.