Skip to content

Add unsafe/dangerous option to disable management console HTTPS

Created by: slimsag

In some situations, it is desirable to disable HTTPS in the management console. For example, if you have already ensured traffic to it is encrypted or you trust your network traffic to it will never be MITM'd and the password stolen.

We should add an UNSAFE_DISABLE_HTTPS=true environment variable as an option to the management console and warn in our docs that setting it means anyone can MITM the traffic to the management console and steal the password.