docs/vmauth.md: mention that backend services must be accessible only via vmauth

This commit is contained in:
Aliaksandr Valialkin 2022-01-28 12:06:45 +02:00
parent f6899cc289
commit 97947c5fcf
No known key found for this signature in database
GPG Key ID: A72BEC6CD3D0DED1
2 changed files with 4 additions and 0 deletions

View File

@ -124,6 +124,8 @@ This may be useful for passing secrets to the config.
## Security
It is expected that all the backend services protected by `vmauth` are located in an isolated private network, so they can be accessed by external users only via `vmauth`.
Do not transfer Basic Auth headers in plaintext over untrusted networks. Enable https. This can be done by passing the following `-tls*` command-line flags to `vmauth`:
```

View File

@ -128,6 +128,8 @@ This may be useful for passing secrets to the config.
## Security
It is expected that all the backend services protected by `vmauth` are located in an isolated private network, so they can be accessed by external users only via `vmauth`.
Do not transfer Basic Auth headers in plaintext over untrusted networks. Enable https. This can be done by passing the following `-tls*` command-line flags to `vmauth`:
```