Closed marcvs closed 2 years ago
Probably the swagger interface should be removed for production. At least the docs should say how to do it.
I'm not sure if this is a security thing. (And usually anything which is not strictly necessary is disabled, when it comes to the sec folks.)
I have no idea how to disable the ssh-passwords separately (as I recommend in the docs now).
True, I can add a configuration flag for that.
Probably the swagger interface should be removed for production. At least the docs should say how to do it.
I'm not sure if this is a security thing. (And usually anything which is not strictly necessary is disabled, when it comes to the sec folks.)
I have no idea how to disable the ssh-passwords separately (as I recommend in the docs now).