diff options
| author | jerebear12 <72420925+jerebear12@users.noreply.github.com> | 2024-02-27 10:38:55 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-27 08:38:55 -0800 |
| commit | 85d6d5371bc39150755b95acc1fa3a7b34657eed (patch) | |
| tree | c9dc78b5bf2aad45804be54292fa3db8d1ef61f4 /weed/command/scaffold | |
| parent | e88467bb36b3618723c663d6b0e96541f654371c (diff) | |
| download | seaweedfs-85d6d5371bc39150755b95acc1fa3a7b34657eed.tar.xz seaweedfs-85d6d5371bc39150755b95acc1fa3a7b34657eed.zip | |
Disable filer UI in configuration (#5297)
* Add filer.ui.enabled configuration property
* Add filer.expose_directory_metadata to config
* Ammend commit
* Remove ShowUI reference
* Update all routes that allow directory metadata
* Add cmd flag to server.go
Diffstat (limited to 'weed/command/scaffold')
| -rw-r--r-- | weed/command/scaffold/security.toml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/weed/command/scaffold/security.toml b/weed/command/scaffold/security.toml index 9626ee58c..c5b2a563c 100644 --- a/weed/command/scaffold/security.toml +++ b/weed/command/scaffold/security.toml @@ -24,6 +24,13 @@ expires_after_seconds = 10 # seconds [access] ui = false +# by default the filer UI is enabled. This can be a security risk if the filer is exposed to the public +# and the JWT for reads is not set. If you don't want the public to have access to the objects in your +# storage, and you haven't set the JWT for reads it is wise to disable access to directory metadata. +# This disables access to the Filer UI, and will no longer return directory metadata in GET requests. +[filer.expose_directory_metadata] +enabled = true + # this jwt signing key is read by master and volume server, and it is used for read operations: # - the Master server generates the JWT, which can be used to read a certain file on a volume server # - the Volume server validates the JWT on reading |