2 years ago
Greetings, I've been using a Redis instance on Railway now and I am wondering if there is a setting somewhere to disable the 'Data' tab in the Dashboard in order to protect the entries from being accessed by anyone with access to the Dashboard UI of Railway.
I believe not having an option to disable that access is a security issue and I understand that having a strong password and 2FA is a good measure already, but it does not eliminate the threat of someone being able to access a computer/browser that is logged in to Railway and clicking on that 'Data' tab.
I apologise if there is indeed a way to disable this and would appreciate any guidance on this.
PS: Encrypted Environment Variables would be a great feature as well
I would love to continue using Redis on Railway but this is a major concern for us unfortunately 😦
8 Replies
2 years ago
does the database still need to be accessed publicly?
Hey, not sure what you mean.
I simply want to disable access to the Redis Data when using the Railway Dashboard
2 years ago
if the database doesn't need to be accessed publicly you can remove the tcp proxy and the data tab will no longer have access to the data
2 years ago
but respectively, if someone has access to the railway dashboard there are far bigger problems than looking at the data tab, they could for instance take down your entire infrastructure without needing 2fa
Yes I agree with you 100%, however I still believe it's better to not have that, and just simply connect to it through other means
2 years ago
someone can easily deploy the dbgate template and have access to a different database UI for your redis data, or even simply re-enable the tcp proxy in 2 seconds and have the database tab back online