Password Pusher: August 2024
New Public Gateway Container
For those self-hosting, there is a new Docker container available (in BETA):
pglombardo/pwpush-public-gateway
It's a cut down Docker image that only delivers pushes to your end users.
It doesn't include logins, sign up, admin dashboard or much of anything else. It's designed to be hosted externally by organizations who want to reduce the exposure area of the application.
Internally, you can run the full fledge container for your team.
With this there are no more random sign ups or strangers pushing passwords on your instance. No more complex firewall & proxy rules either!
To illustrate, I put together a quick deployment architecture diagram:
tldr; Run pglombardo/pwpush-public-gateway on your public facing network, pglombardo/pwpush internally and point both to the same database.
The new container is in BETA. Please let me know if you deploy it and what your thoughts are!
If you run a security audit on the container, please consider publishing the results for the community to see.
Thanks to Fabrizio
This new feature was born from a user request.
Fabrizio AKA technofab on Github made the request for this new container out of a company need to only expose pushes to end users and keep all of the user accounts, push creation and everything else internal to his organization.
Thanks Fabrizio for the great idea!
👉 See Also
pglombardo/pwpush-public-gateway on Docker Hub
Maintenance on pwpush.com
This Saturday August 31 through Sunday September 1, I’ll be periodically updating pwpush.com with a backlog of features I’ve been cooking for some time now.
More on that in the next newsletter.
There may be some periodic downtime but I don’t expect more than an hour in total.
Saturday and Sunday are generally the lowest traffic periods (90% lower traffic than during the week) so hoping no one is affected too much by this.
As always, if you have any questions or issues, feel free to contact me anytime at pglombardo@pwpush.com.
Thanks for Reading!
Peter Giacomo Lombardo
See Also
Password Pusher on Github & Docker Hub
Support Password Pusher and get $200 in cloud credits by signing up to Digital Ocean with this link
