-
-
Notifications
You must be signed in to change notification settings - Fork 223
Description
Issue submitter TODO list
- I've searched for an already existing issues here
- I'm running a supported version of the application which is listed here and the feature is not present there
Is your proposal related to a problem?
No response
Describe the feature you're interested in
As far as I'm concerned, it's not possible for Kafbat to listen on HTTPS port (couldn't find it, but maybe someone can point me to an example). It's possible to hide it behind nginx or another proxy server and setup secure connection there. In my environment though, multiple people have SSH access on the server where Kafbat-ui works, and they have the ability to raise privileges. So, it's possible to use diagnostic tools, i.e. strace, and get passwords on any person logging in the web UI by just attaching the the Kafbat process.
After setting up annoyingly overcomplicated Kafka auth and LDAP auth (and that's awesome that you could implement all of it), it's kind of missing the point of the whole security if a team should have the access to a Kafbat server.
So could you add HTTPS option to the configuration, not only plain HTTP?
Thank you.
Describe alternatives you've considered
No response
Version you're running
1.2.0
Additional context
No response