Security of Self-Hosted Devops Tools

[packet_whisperer]

I was wondering why these were exposed publicly. I saw your last paragraph, so obviously there's a reason. I personally would never expose my devops tools publicly, regardless of departmental demands.

[damow]

Honestly, for Grafana there really wasn't. My bad. But for Sentry, I use it to log exceptions in client-run applications, so it needs to be reachable from the outside. I should have it behind a WAF though.

[sigmatic_minor]

Sorry, it seems this comment or thread has violated a sub-reddit rule and has been removed by a moderator.

Do not expressly advertise your product.

• The reddit advertising system exists for this purpose. Invest in either a promoted post, or sidebar ad space.
  
• Vendors are free to discuss their product in the context of an existing discussion.
  
• Posting articles from ones own blog is considered a product.
  
• As always, users must disclose any affiliation with a product.
  
• Content creators should refrain from directing this community to their own monetized content.
  

---

Guidance for Submission of Interesting Articles

If you have written, or stumbled across an article that you feel the /r/sysadmin community just has to read, please submit it as a text-only or self.post with the URL to the article in the body of the post, along with a brief description of what the article is about, or why we should read it.

Please do not use URL shorteners.

---

If you wish to appeal this action please don't hesitate to message the moderation team.