search

chocolatey-community / simple-server

The Chocolatey Simple Server - https://community.chocolatey.org/packages/chocolatey.server
Apache License 2.0
44 stars 17 forks source link

Should installation cover hardening or provide links for hardening? #56

Open ferventcoder opened 4 years ago

ferventcoder commented 4 years ago

Similar to #55, should we cover hardening IIS/Windows machines for those not familiar with the two or at least links to more reading? I ask b/c this was brought up to me in private discussions and it was pointed out not everyone is familiar with Asp.NET and how things work there.

pauby commented 4 years ago

I think covering hardening is opening a Pandora's box a little. What if the advice given is wrong or out of date? Every installation is a 'special snowflake'; providing specifics may be problematic to adapt.

Chocolatey has always been about giving the community and customers the information to help themselves. In that respect, I feel we should point people to official documentation that they can use to help themselves and adapt to their specific situation. As we don't recommend that Simple-Server is used in any production scenarios beyond the most basic, providing links to official documentation would seem a balanced solution.