greenbone / docs

Documentation for the Greenbone Community Edition
https://greenbone.github.io/docs/
Creative Commons Attribution Share Alike 4.0 International
23 stars 32 forks source link

Web port bound to all interfaces, documentation should reflect this #398

Closed huornlmj closed 11 months ago

huornlmj commented 11 months ago

https://github.com/greenbone/docs/blob/ba8fcefd522becb69cc853f274372860f09d736b/src/_static/docker-compose-22.4.yml#L92 The web ui interface is bound to all interfaces but the documentation says

xdg-open "http://127.0.0.1:9392" 2>/dev/null >/dev/null &

This is misleading and makes the end user think that the service is only bound to loopback. Either the documentation should state to use the host name or reconfigure the deployment to bind the web ui port to loopback for security purposes.

bjoernricks commented 11 months ago

With #405 I've changed the compose file to listen only on the local interface of the docker host now.