Yikes - local mist.io installation is open to everyone about mist-ce HOT 2 CLOSED

Hi fuqqer,

mist.io is not meant to be installed in a publicly accesible machine without some kind of authentication in front of it. We will discuss with the rest of the dev team if we can add some kind of basic authentication, since others have requested it. In your case, probably the simplest solution would be to add basic http authentication via apache or nginx.

I will add a section to the install doc to clarify that people should not leave it publicly accesible without some means of lockdown or authentication.

Thanks!

from mist-ce.

Mist.io will now start on the localhost interface only (43a5145). You can setup haproxy to listen on 0.0.0.0 by editing haproxy.conf file and restarting haproxy

$vi haproxy.conf

change : frontend www localhost:8000 to frontend www 0.0.0.0:8000
and restart haproxy

$ ./bin/supervisorctl restart haproxy

from mist-ce.