When using the Docker Compose template, this section:
...leaves the Crowdsec Manager UI open to the web (even when Pangolin authentication is used) using http://[IP addrress]:8080 when someone does not have their VPS firewall configured correctly.
Port 8080 was wide open with RackNerd's default firewall settings (because published ports get opened up on ufw in a standard Docker+Portainer install) -- and Racknerd is widely used by Pangolin users via their affiliate deals.
Perhaps suggest removing the port assignment in the sample Compose and instead relying on Docker Networking in Pangolin between the Gerbil & Crowdsec Manager containers to secure it.
When using the Docker Compose template, this section:
...leaves the Crowdsec Manager UI open to the web (even when Pangolin authentication is used) using
http://[IP addrress]:8080when someone does not have their VPS firewall configured correctly.Port 8080 was wide open with RackNerd's default firewall settings (because published ports get opened up on
ufwin a standard Docker+Portainer install) -- and Racknerd is widely used by Pangolin users via their affiliate deals.Perhaps suggest removing the port assignment in the sample Compose and instead relying on Docker Networking in Pangolin between the Gerbil & Crowdsec Manager containers to secure it.