Server hacked - is Node-Red an entry point and how to prevent this?

[Colin]

Some of what you need to know is contained in this FAQ post, containing advice on how to safely access node-red over the internet.

Safely accessing Node-RED over the Internet

Update 2025-02-19 The best advice for most people doing home automation is still: Don't expose Node-RED to the outside world! Where you really have to have some outside access, keep it as hands-off and restricted as possible. For example, using a Telegram bot. Also keep it as minimal as possible, e.g. Don't expose the Editor - EVER! If you want to provide remote control of your heating or the precious plants in your greenhouse, provide explicit controls with strong limits. Don't expose ever…