Post #3968480

Oh, hey. I had Crowdsec Manager running on my VPS, using their Docker Compose template. Including this part: ports: - "8080:8080" I just accidentally discovered that anyone could access the UI with [VPS IP]:8080, even though it's locked behind Pangolin's authentication. So, yeah... Don't expose sensitive VPS ports in Docker unless you know they're firewalled, kids. Time to go tear shit down and rebuild it... https://github.com/hhftechnology/crowdsec_manager #SelfHosting #Crowdsec