Closed huornlmj closed 11 months ago
https://github.com/greenbone/docs/blob/ba8fcefd522becb69cc853f274372860f09d736b/src/_static/docker-compose-22.4.yml#L92 The web ui interface is bound to all interfaces but the documentation says
xdg-open "http://127.0.0.1:9392" 2>/dev/null >/dev/null &
This is misleading and makes the end user think that the service is only bound to loopback. Either the documentation should state to use the host name or reconfigure the deployment to bind the web ui port to loopback for security purposes.
With #405 I've changed the compose file to listen only on the local interface of the docker host now.
https://github.com/greenbone/docs/blob/ba8fcefd522becb69cc853f274372860f09d736b/src/_static/docker-compose-22.4.yml#L92 The web ui interface is bound to all interfaces but the documentation says
This is misleading and makes the end user think that the service is only bound to loopback. Either the documentation should state to use the host name or reconfigure the deployment to bind the web ui port to loopback for security purposes.