Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dashboard uses HTTP (where HTTPS should be expected) #77

Open
eMTee72 opened this issue Oct 9, 2023 · 2 comments
Open

Dashboard uses HTTP (where HTTPS should be expected) #77

eMTee72 opened this issue Oct 9, 2023 · 2 comments
Labels
enhancement New feature or request

Comments

@eMTee72
Copy link

eMTee72 commented Oct 9, 2023

Describe the bug

The Dashboard is used as an interface to your containers. The Dashboard is protected by a username & password combination.
However, this information is served over an HTTP connection, which suggests the data between the Dashboard container and the web browser is unprotected, resulting in exposing confidential information (login credentials / financial data / others?) to the network.

Steps to reproduce bug

  1. Deploy a Dashboard container.
  2. The Dashboard is now accessible on HTTP://IP-address:8501. This should become HTTPS://IP-address:8501
@eMTee72 eMTee72 added the bug Something isn't working label Oct 9, 2023
@fengtality fengtality added enhancement New feature or request and removed bug Something isn't working labels Oct 10, 2023
@fengtality
Copy link
Contributor

Great suggestion - I agree that this should be added in the long term. Right now, Dashboard is still in beta so our main priority is getting feedback so that we can improve the user experience and interface of the main pages.

@cllasyx
Copy link

cllasyx commented Sep 4, 2024

If you need HTTPS so desperately, deploy reverse proxy with internal certificates. I suggest and am myself using Caddy also in docker container which is a bit of pain to set up but works wonders once done.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants