Secure python web app
i have python web app build on top of BaseHTTPServer, which runs on specyfic port. It runs system commands and shows output. I want do limit access to this app. What开发者_如何学运维 are posible ways to do it? Requirements:
- it must not be limited to LAN
- simple to implement/deploy
Easiest and most secure: Put Apache or Nginx in front of it with an HTTPS proxy.
Update: Or VPN access as suggested by Jakob. Good idea.
Common methods: VPN access. Firewalls, logging, denyhosts style defences, complicated root passwords, no su, run as its own user.
(if it was my personal server) Logic bombs
精彩评论