mosaicdao/rust-mosaic

Docker compose RPC should not be exposed to the world

Closed this issue · 1 comments

schemar commented

As a developer
I don't want to expose the geth RPCs to the world
Because I it is not secure.

The docker compose file has the following command for geth_rinkeby:
command: ["--rinkeby", "--rpc", "--rpcaddr", "0.0.0.0", "--rpcvhosts", "*"]

This allows access from any host. Instead, access should be limited to the host machine and the rust-mosaic container.

References #9