From 8793c3636493c5efdda08f3b5ed5c6e1ea594fd9 Mon Sep 17 00:00:00 2001 From: Alex X Date: Thu, 11 Jan 2024 14:26:51 +0300 Subject: [PATCH] Add warning about secure access for API to docs --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 8ab5291f..aaed9410 100644 --- a/README.md +++ b/README.md @@ -790,6 +790,8 @@ streams: The HTTP API is the main part for interacting with the application. Default address: `http://localhost:1984/`. +**Important!** go2rtc passes requests from localhost and from unix socket without HTTP authorisation, even if you have it configured! It is your responsibility to set up secure external access to API. If not properly configured, an attacker can gain access to your cameras and even your server. + [API description](https://github.com/AlexxIT/go2rtc/tree/master/api). **Module config**