From e59b3b68598897bd790b3502a076f4288659a81f Mon Sep 17 00:00:00 2001 From: Jacob Gadikian Date: Tue, 2 Aug 2016 17:36:02 +0700 Subject: [PATCH] Update installing.md --- site/installing.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/site/installing.md b/site/installing.md index 51aa53e23..b184b6bba 100644 --- a/site/installing.md +++ b/site/installing.md @@ -44,7 +44,8 @@ Where, * `` is the name you gave to your virtual machine with docker-machine. -**NB: Scope allows anyone with access to the UI control over your containers, and the hosts running them! ** +#### NB: Scope allows anyone with access to the UI control over your containers, and the hosts running them! + Therefore, the Scope app endpoint (port 4040) should not be made accessible on the Internet. Additionally, traffic between the app and the probe is currently insecure and should also not traverse the Internet, meaning that you should either use the private / internal IP addresses of your nodes when setting it up, or route this traffic through weave net. To put scope behind a very simple password, you can use [Caddy](https://github.com/mholt/caddy) to protect the endpoint by making the port 4040 available to localhost and using caddy to proxy it.... or, just use weave cloud. ###Using Weave Cloud