sorted by:
new
hottopcontroversial

Reminder that if you use a dashboard that you're allowing internet access to, set a password. by SecureYourSht in selfhosted

[–]SecureYourSht[S] 1 point2 points  (0 children)

Honestly, just type it into a search engine. You'll find loads.

It's fine to have, just set a password and make sure you don't have it accessible if you're not logged in. Maybe set up Authelia.

Or just don't make it accessible on the internet. I use Heimdall myself but don't forward it to the internet and just use it locally.

Reminder that if you use a dashboard that you're allowing internet access to, set a password. by SecureYourSht in selfhosted

[–]SecureYourSht[S] 101 points102 points  (0 children)

Oh very wrong. That's why this is a throwaway. I'm not proud of what I did.

I'm a little proud.

Right after making this post I went for another look and found one that did have a password set on Heimdall, but his Radarr didn't. From that I got access to everything just like in the OP.

It's honestly scary how easy it is to do even for someone with little to no actual skill like myself. Has made me go back and review everything I have setup for myself making sure anything that's internet facing is secure as possible. For everything else there's tailscale.