Open andrewhowdencom opened 4 years ago
Investigate "open policy agent"
mTLS even for localhost (figure it out with debian packaging, of generate it via cli).
Also, bind to Unix domain socket by default and not port.
Lastly, run as custom user.
—
Prevents browsers accessing localhost resources.
Security.txt (securitytxt.org)