OpenMarine

Hi,

I have been using Node Red for just a few weeks. Started working on remote access. Messed around with MQTT Cloud service but

 it is just a little to in depth for me. A lot of capabilities I'm not really looking for.

Anyway, I opened up a port on my router and directed it at my pi port 1880. Now I can access NodeRed anywhere, but know there are now security risks.

Has anyone added security to Node Red on their Pi running OP? Can this be included in an OP release.

Thanks for any help!

[attachment=176]

Ask Google maybe...
https://nodered.org/docs/security


Sent from my SGP511 using Tapatalk

i just put security on mine . i have it setup with duckdns and opened ports in router..
first you need admin. dont forget sudo
https://nodered.org/docs/node-red-admin
then follow this post
https://nodered.org/docs/security


jim

(2017-10-26, 03:28 AM)PaddyB Wrote: [ -> ]Ask Google maybe...
https://nodered.org/docs/security


Sent from my SGP511 using Tapatalk

Ask maybe be a human. Already looked it up, just looking for what other people are doing.. Geez must be nice on that mountain top.............

---

(2017-10-26, 08:52 AM)jim321 Wrote: [ -> ]i just put security on mine . i have it setup with duckdns and opened ports in router..
first you need admin. dont forget sudo
https://nodered.org/docs/node-red-admin
then follow this post
https://nodered.org/docs/security


jim

Thanks Jim

You could use NGROK cloud tunneling service to add security.
Normaly it is used to tunnel ports through firewalls in situation, where you can‘t open ports.(works great through gsm networks ).

It gives you a random webadress, that can not be guessed. Aditionally you can implement a user/password dialog before accessing the whole website.

Martin

(2017-11-01, 07:38 AM)Alpenskipper Wrote: [ -> ]You could use NGROK cloud tunneling service to add security.
Normaly it is used to tunnel ports through firewalls in situation, where you can‘t open ports.(works great through gsm networks ).

It gives you a random webadress, that can not be guessed. Aditionally you can implement a user/password dialog before accessing the whole website.

Martin

Martin, Thank you for the suggestion. Ill check it out.