From bc16381c90fb16b2622069218bb3e666cd38df32 Mon Sep 17 00:00:00 2001 From: Alejandro Celaya Date: Mon, 22 Jun 2020 21:57:58 +0200 Subject: [PATCH] Added warning to pre-configuring servers section --- README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.md b/README.md index 629d9c74..4cd69402 100644 --- a/README.md +++ b/README.md @@ -68,6 +68,11 @@ If you are using the shlink-web-client docker image, you can mount the `servers. docker run --name shlink-web-client -p 8000:80 -v ${PWD}/servers.json:/usr/share/nginx/html/servers.json shlinkio/shlink-web-client +> **Be extremely careful when using this feature.** +> Due to shlink-web-client's client-side nature, the file needs to be accessible from the browser. +> Because of that, make sure you use this only when you self-host shlink-web-client, and you know only trusted people will have access to it. +> Failing to do this could cause your API keys to end up being exposed. + ## Serve project in subpath Official distributable files have been built so that they are served from the root of a domain.