From cc3d256359ce81824c75c3d306a978153de67828 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Emrik=20=C3=96stling?= Date: Sat, 26 Sep 2026 01:40:46 +0200 Subject: [PATCH] docs: clear warning for only allowing users you trust --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index cac00d64..458bcddc 100644 --- a/README.md +++ b/README.md @@ -89,6 +89,9 @@ Then visit `http://localhost:3000` in your browser and create your account. Don' All are optional, JWT_SECRET is recommended to be set. +> [!WARNING] +> Never expose the service to the internet with ALLOW_UNAUTHENTICATED or ACCOUNT_REGISTRATION true. Only allow users you trust to access the service. + | Name | Default | Description | | ---------------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | | JWT_SECRET | when unset it will use the value from randomUUID() | A long and secret string used to sign the JSON Web Token |