thielj

Results 67 comments of thielj

@autokilla47 Sorry URL was messed up. Try: https://github.com/thielj/NATS-WebUI or go directly to https://github.com/thielj/NATS-WebUI/pkgs/container/nats-webui

@bokysan I did some research on running postfix without root privileges: it wouldn't be impossible, but it isn't really a scenario the maintainers would want to support. I think this...

@zaggash The formerly deprecated port 465 ('smtps') and implicit TLS has now become the recommended method ('submissions'). I think someone figured out that a man in the middle attacker could...

@torokbalint86 You could repeatedly run [ldapsearch](https://docs.ldap.com/ldap-sdk/docs/tool-usages/ldapsearch.html) from a cron job and use a push monitor type to track the status.

@CommanderStorm as discussed last week

@louislam > But I didn't encrypt them, because I think encrypting them is meaningless, as the encryption key will be in the same data directory. If an attacker can read...

Portainer, Yacht, etc aren't really *okay* to do that either and I'm proxying them, too. However... - Portainer needs much wider access to the docker API for creating containers, networks,...

You have closed both this issue and the other as "completed" ¯\_(ツ)_/¯ And louislam explicitly wanted to know what other people think. > The advisory is closed, but I think...

The API call currently used - [GET /containers/{id}/json](https://docs.docker.com/engine/api/v1.45/#tag/Container/operation/ContainerInspect) exposes environment variables and a whole lot more. https://github.com/louislam/uptime-kuma/blob/88b7c047a859d83862f917b876b921ec026fef5a/server/model/monitor.js#L724 https://github.com/louislam/uptime-kuma/blob/88b7c047a859d83862f917b876b921ec026fef5a/server/docker.js#L72 Ideally, the use of docker API within Uptime Kuma would be restricted...

Try this, even if you're already proxying: `curl 'http://localhost:2375/containers/json' | jq` It includes detailed information, including labels used to provide passwords for auth middlewares, network information, credentials passed in commands,...