Web site and api need authentication. Even a simple configurable username/password would suffice to begin with.
Activity
dfoderick commentedon Apr 30, 2018
Until authentication is added users should only run the sites behind a firewall and do not open ports to the outside world.