Security - The Best Way

[TotallyInformation]

@edilsonlucas

When using it, I'm theoretically opening a port to the internet when I need to use the telegram feature or to download repositories, so I end up having this vulnerability?

Depends on how you use Telegram. There are 2 ways and the simples creates a connection from Node-RED to Telegram which is significantly less risky than creating an inbound connection.

@edilsonlucas

What would be the best practices to protect my application and my server

Please have a look at this FAQ post for advice on how to safely access node-red over the internet.

Safely accessing Node-RED over the Internet

NOTES: This is a large and complex subject. So this FAQ is likely to be a work-in-progress for some time. This FAQ MUST NOT be taken as gospel or as professional advice. The information is shared in good faith but with no guarantees. Get the input of professionals and get your system regularly security tested, at least penetration tested. Please feel free to add suggestions for content and links to existing resources. Overview of options There are two main options for making Node-RED endpoi…