Skip to content
This repository was archived by the owner on Jan 19, 2019. It is now read-only.

Commit 425a551

Browse files
committed
update insecure modes description
1 parent c3a79f3 commit 425a551

File tree

1 file changed

+20
-7
lines changed

1 file changed

+20
-7
lines changed

mixed/insecure_modes.md

+20-7
Original file line numberDiff line numberDiff line change
@@ -53,13 +53,26 @@ To start Centrifugo in this mode use `--insecure_api` flag:
5353
centrifugo --config=config.json --insecure_api
5454
```
5555

56-
# Insecure web mode (new in v1.3.0)
56+
# Insecure admin mode (new in v1.3.0, changed in v1.6.0)
5757

58-
Allows run Centrifugo in insecure web mode - in this case you don't need to set `web_password`
59-
and `web_secret` for admin web interface in config - you will be logged in automatically
60-
without any password. Note that this is only for development or if you protected web interface
61-
with firewall rules in production. To start Centrifugo with web interface in insecure mode run:
58+
Allows run Centrifugo in insecure admin mode - in this case you don't need to set `admin_password` and `admin_secret`
59+
for admin endpoints in config - all admin endpoints access won't require authentication at all.
60+
61+
Note that this is **only for development or if you protected web interface with firewall rules in production**.
62+
63+
To start Centrifugo in this insecure mode run:
64+
65+
```bash
66+
centrifugo --config=config.json --insecure_admin
67+
```
68+
69+
If this mode enabled and you are using web interface **you will be logged in automatically without any password**. This
70+
can be useful if you want to hide Centrifugo web interface behind you own company authentication proxy and don't want to
71+
have extra password for Centrifugo:
6272

6373
```bash
64-
centrifugo --config=config.json --web --insecure_web
65-
```
74+
centrifugo --config=config.json --insecure_admin --web
75+
```
76+
77+
Again: every insecure mode described here potentially dangerous and you must understand how to protect your Centrifugo
78+
by firewall rules this before turning on insecure modes in production.

0 commit comments

Comments
 (0)