somakeit / smib

1 stars 0 forks source link

Mongo DB open to all hosts #77

Closed sjefferson99 closed 3 months ago

sjefferson99 commented 3 months ago

In the container startup logs: smib-db-ui | Server is open to allow connections from anyone (0.0.0.0) smib-db-ui | basicAuth credentials are "admin:pass", it is recommended you change this in your config.js! smib-db-ui | Mongo Express server listening at http://0.0.0.0:8081

The db should be configured to only accept connections from localhost/the other containers.

sam57719 commented 3 months ago

@sjefferson99 that Server is open to allow connections from anyone (0.0.0.0) is the UI - if set to localhost or something - then no one would be able to access it and it would be useless. I agree with the basic AUTH thing though

sjefferson99 commented 3 months ago

@sam57719 Keep forgetting you put a UI on there. I'll cancel this one as auth on the other issue should be fine for access restriction on this for the data it stores.