diff --git a/readme.md b/readme.md index bdfb6ef1..86fdbc39 100644 --- a/readme.md +++ b/readme.md @@ -825,6 +825,5 @@ Afterwards apply the correct permissions with `sudo chown root:root /root/automa 1. Add the following new line to the crontab if not already present: `0 5 * * * /root/automatic-updates.sh` which will run the script at 05:00 each day. 1. save and close the crontab (when using nano the shortcuts for this are `Ctrl + o` then `Enter` to save, and close the editor with `Ctrl + x`). - ### Securing Your Caddy Instance from Unauthorized ACME Challenges (By design)[https://github.com/nextcloud/all-in-one/discussions/4882#discussioncomment-9858384], Caddy, which handles automatic SSL certificate generation, is vulnerable to receiving DNS challenges for arbitrary hostnames from anyone on the internet. While this does not compromise your server's security, it can result in cluttered logs and rejected certificate renewal attempts due to rate limit abuse. To mitigate this issue, it is recommended to place the AIO interface behind a VPN and/or limit its public exposure. \ No newline at end of file