crayon icon indicating copy to clipboard operation
crayon copied to clipboard

Crayon might require some form of password protection

Open edran opened this issue 8 years ago • 2 comments

Maybe a simple key generated by the server at startup, or something you can add to the docker file startup.

edran avatar Feb 06 '17 21:02 edran

Tensorboard doesn't have password authentication either, right? I think it is enough to just use ssh tunnels for security. Maybe the README should suggest, as the standard way of running crayon, to only bind to localhost and to use ssh tunnels. So, the docker run line would looks something like this:

$ docker run -d -p 127.0.0.1:8888:8888 -p 127.0.0.1:8889:8889 --name crayon alband/crayon

It could also point out that by removing the "127.0.0.1"s you can bind to all addresses, but that you might not want to do this if you are on a publicly accessible server.

(Note: I have edited this comment. In a previous version I suggested that Tensorboard binds to localhost by default. But actually it binds all addresses by default. It seems better to me to default to security, but I guess different people might have different opinions about this.)

greaber avatar Jun 20 '17 09:06 greaber

Just throw an nginx between it will handle both SSL and auth.

hholst80 avatar Jul 06 '17 16:07 hholst80