From 10998e52e754d2cd402791a6fa891099b0c224fa Mon Sep 17 00:00:00 2001 From: myvesta <38690722+myvesta@users.noreply.github.com> Date: Sun, 10 May 2020 02:19:49 +0200 Subject: [PATCH] Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 3cb49b49..3548062c 100644 --- a/README.md +++ b/README.md @@ -13,6 +13,8 @@ Features + Support for Debian 10 (previous releases are also supported) ++ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services + + You can completely "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL + During installation you will be asked to choose a secret URL for your hosting panel + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.