From f2b90bbcdb5347bfb68ee0e3343358e2a8e466dc Mon Sep 17 00:00:00 2001 From: tv Date: Mon, 2 Nov 2026 21:34:12 +0100 Subject: api: allow auth delegation --- docs/trust.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'docs/trust.md') diff --git a/docs/trust.md b/docs/trust.md index 521a175..dc80045 100644 --- a/docs/trust.md +++ b/docs/trust.md @@ -34,7 +34,10 @@ secret like the swarm key: readable by its owner only (a node warns otherwise; a it creates is). **The HTTP API.** Every endpoint but the API description needs a user from -`--htpasswd`. It listens on `127.0.0.1:3000` by default (`--bind-addr`) and speaks +`--htpasswd`, or one a reverse proxy names (`--user-header`): the node believes that +header from `--trusted-proxies` alone, but from those blindly, so whoever can send +requests from such an address (another user of the same host, with the default +loopback addresses) can be any user. It listens on `127.0.0.1:3000` by default (`--bind-addr`) and speaks plain HTTP: to expose it, put a TLS proxy in front. All users may read and write user data and use the admin endpoints (remakes, forgetting peers, exports, log filters). There are no read-only users: whoever may open the dashboard may also edit and delete -- cgit v1.3.1