vaultwarden
/
vaultwarden-alternativa-bitwarden
mirror of https://github.com/dani-garcia/vaultwarden.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

added explanation about stripping of logging.

rdslw 2024-08-02 22:38:59 +00:00
parent 089af00c68
commit 0143c7b812
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Hardening-Guide.md

@ -43,6 +43,8 @@ If your reverse proxy is configured to save access logs, or the access logs are
No other data is ever send via GET request, encrypted or unencrypted. No other data is ever send via GET request, encrypted or unencrypted.
Be advised that internal vaultwarden logging strips query to 30 chars, hence access_token is truncated, meaning if not using reverse proxy, you shall be safe from this by default.
# Docker configuration # Docker configuration
The subsections below cover hardening related to Docker. The subsections below cover hardening related to Docker.