Protect Node Red from anyware - General - Node-RED Forum
Node-RED Security Variants Discussed and Tested Context The goal is to protect a Node-RED installation exposed through a router, while keeping the setup simple and understandable. The following four variants were discussed and tested in stages. Common assumptions: Node-RED runs on port 1880. Node-RED admin authentication is enabled. Nginx is used as a reverse proxy. Nginx access logs are enabled. Failed Node-RED editor logins appear as: POST /auth/token ... 403 Fail2ban moni...