Internet security warnings needed

Open
#363 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
45/100
Issue type
Documentation
Clarity
Mostly clear
Activity status
Stale
Domain
documentation

Research direction

Locate the getting-started and installing documentation sections referenced in the issue and review their existing security guidance. Add warnings covering TLS, Editor authentication, a dedicated OS user, non-default credentials, and safer proxying; done means each listed precaution is clearly presented in both relevant sections.

Written by the indexing model from the issue text.

Description

Please add a security warnings getting started and installing sections not to expose Node-RED to the Internet without suitable precautions including:

  • MUST use TLS (HTTPS)
  • MUST have a login with strong passcode for the Editor
  • MUST run Node-RED under a dedicated, separate OS user
  • MUST NOT have default id's and passwords on the Node-RED server (especially Pi's)
  • SHOULD avoid exposing the Editor to the Internet directly, SHOULD use a trusted security proxy such as Cloudflare Zero Trust, NGROK, etc.
Dominant language
JavaScript
Stars
118
Forks
161
Avg merge
8h 18m
Merged PRs (30d)
4

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from node-red/node-red.github.io

All issues in node-red/node-red.github.io

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.