Admin UI open if VPS firewall misconfigured (crowdsec_manager #132)

Pangolin & Newt Tools CrowdSec Manager
1

:octopus: GitHub issue crowdsec_manager #132, opened by rxbrad on GitHub

When using the Docker Compose template, this section:

    ports:
      - "8080:8080"

…leaves the Crowdsec Manager UI open to the web (even when Pangolin authentication is used) using http://[IP addrress]:8080 when someone does not have their VPS firewall configured correctly.

Port 8080 was wide open with RackNerd’s default firewall settings (because published ports get opened up on ufw in a standard Docker+Portainer install) – and Racknerd is widely used by Pangolin users via their affiliate deals.

Perhaps suggest removing the port assignment in the sample Compose and instead relying on Docker Networking in Pangolin between the Gerbil & Crowdsec Manager containers to secure it.

:speech_balloon: Discuss it here. Status, fixes and code review stay on GitHub.