search

khast3x / Redcloud

Automated Red Team Infrastructure deployement using Docker
MIT License
1.2k stars 200 forks source link

[Feature Request] Make secure by default/optional hardening #18

Closed dhauenstein closed 4 years ago

dhauenstein commented 4 years ago

Hi, I would like to set up a redcloud instance, but would love to have an optional flag to make the web ui listen to localhost only (connecting to it via ssh fowarding) to eliminate the need to expose unwanted ports. I know this can be set in the config, but it would be nifty to have an optional flag for that.

khast3x commented 4 years ago

Hello, Thank you for taking the time to explain what you had in mind.
I see what you mean, but I don't think I'll be integrating this feature (sorry!).

The elegant way of adding this feature is by using templates, but I don't think I want the project to become a templating tool.
Furthermore, Redcloud is mainly for external deployment, avoiding cumbersome local download and storage of containers.

That being said, if you wish to remove the web facing interfaces, you can do so by editing or removing mapped ports from the reverse proxy (traefik) in the docker-compose.yml file here. You may also change the mapped port to something less obvious if you so wish.

Keep in mind Redcloud will pull Redcloud on the remote server by using git if it finds it on the installation candidate, otherwise it will copy the local files using scp. You can supress this behaviour in redcloud.pydirectly.

Hope this helps, Cheers

dhauenstein commented 4 years ago

Hey man, thanks for the detailed feedback. I totally understand it's not in your interest to bloat the code base unnecessary, no worries. Cheers and keep up the great work.