Securing Node-RED - Printable Version +- OpenMarine (https://forum.openmarine.net) +-- Forum: OpenPlotter (https://forum.openmarine.net/forumdisplay.php?fid=1) +--- Forum: Node Red (https://forum.openmarine.net/forumdisplay.php?fid=15) +--- Thread: Securing Node-RED (/showthread.php?tid=3203) |
Securing Node-RED - sebba - 2021-01-13 Hello, I am trying to secure Node-RED following this: https://nodered.org/docs/user-guide/runtime/securing-node-red But no success for now... The ":3000/plugins/signalk-node-red/redAdmin" is still not protected. I tried to edit the settings file found at /home/pi/.signalk/node_modules/node-red/settings.js but I have the feeling this is not the file used by integrated Node-RED. It seems to be ignored. There is a different settings file for the integrated Node-RED? Running latest SK and updated OP Thanks, Seb RE: Securing Node-RED - jamos.tan@gmail.com - 2021-02-18 Same question, you've found it already? I'm still looking. Also found this helpful tool this locates the settings file from node-red debug message. But, it says not found: https://github.com/cflurin/node-red-contrib-dsm/wiki/RED-settings RE: Securing Node-RED - sebba - 2021-02-18 it seems i asked the wrong question the node-red seems to be accessible only by admin type users, same for admin and ui (dashboard) area so, first time you have to log in in signalk as admin and only after that node-red is accessible the problem, now, is with the ui area, which cannot be accessed by other users type but admins i also tried to have a standalone node-red installation, beside signalk, not through signalk's node-red plugin it's not working, there are some conflicts but my knowledge is not enough to fix it the single way i could have node-red and signalk on the same machine was the signalk's plugin but this one seems to change some things in node-red's installation (ports? paths? unfortunately I cannot handle...) |