Production Recommendations

Security recommendations for running Exposr.

Overview

While Exposr is experimental, the following practices can reduce risk if you choose to use it:

Recommendations

• Run the relay server as a dedicated non-root user
• Restrict firewall rules to only the necessary port ranges
• Always use agent token authentication
• Do not expose services that handle sensitive data without their own encryption
• Monitor server logs for unexpected connections
• Use private relay servers rather than shared instances
• Keep Exposr updated to the latest version
• Consider running the tunneled application itself with HTTPS if it handles sensitive data
• Do not expose administrative interfaces or databases