3 ms·

This looks really well done, newcrobuzon. Very impressed. I especially love your web UI. It makes it very easy to start experimenting with workflows without th

This looks really well done, newcrobuzon. Very impressed. I especially love your web UI. It makes it very easy to start experimenting with workflows without the overhead of having to set up a local development environment. I am curious how you store secrets (e.g. AWS access key id, secret access key). There isn't a login wall and it's not clear that the values will be protected from you, so I am loathe to put my credentials on there. Great work overall. Wish you the best.

zomglings 6y ago
After clicking logout, I had no way of logging back in. :)
- newcrobuzon 6y ago
  Ooops, good catch, I will fix that :)
newcrobuzon 6y ago
Thanks for the kind words! Yes, I would still be careful with passwords in the public beta. It goes via SSL and you get a unique UUID URL so all-in-all it is kinda secured (plus time-to-live of the instance is only 3 hours which limits any time to hack it) but still this is not 100% secure and I would not recommend it for any kind of production use (including any use of passwords you dont want exposed). The free instances are not (yet) password protected (other then the UUID) - this on the other hand is useful if you want to share the envrionment with somebody, just send them the link... This is just a beginning of the public hosting so I will need to think through further improvements that would go into the hosting, security-wise and other aspects as well. My main objective at this stage for the free hosted instances was to give people way to play with Titnaoboa or quickly test something, especially if something is not working in their local environment (say dependencies) and they want quickly re-test in vanilla environment. If you want to add aws secrets or what not I would suggest to just download/install your local version, it is super easy: https://github.com/mikub/titanoboa#installation https://github.com/mikub/titanoboa#installation Or if you need a public IP to integration just grab the docker instance and spin it in your AWS ECS or something.

zomglings 6y ago

After clicking logout, I had no way of logging back in. :)

newcrobuzon 6y ago
Ooops, good catch, I will fix that :)

newcrobuzon 6y ago

Thanks for the kind words! Yes, I would still be careful with passwords in the public beta. It goes via SSL and you get a unique UUID URL so all-in-all it is kinda secured (plus time-to-live of the instance is only 3 hours which limits any time to hack it) but still this is not 100% secure and I would not recommend it for any kind of production use (including any use of passwords you dont want exposed). The free instances are not (yet) password protected (other then the UUID) - this on the other hand is useful if you want to share the envrionment with somebody, just send them the link... This is just a beginning of the public hosting so I will need to think through further improvements that would go into the hosting, security-wise and other aspects as well. My main objective at this stage for the free hosted instances was to give people way to play with Titnaoboa or quickly test something, especially if something is not working in their local environment (say dependencies) and they want quickly re-test in vanilla environment. If you want to add aws secrets or what not I would suggest to just download/install your local version, it is super easy: https://github.com/mikub/titanoboa#installation https://github.com/mikub/titanoboa#installation Or if you need a public IP to integration just grab the docker instance and spin it in your AWS ECS or something.