Security
========

TLS
---

You should consider running the dashboard using TLS (SSL) security layer.

Password Storage
----------------

All passwords are stored as ``bcrypt hashes``.
At this point in time, no rainbow-table and brute-force attacks are available against ``bcrypt``.

Reset Root Password
-------------------

.. _reset-root-password:

To reset the ``root`` password you need to have access to the machine running the dashboard.
Run

.. code-block:: bash

    dashboard-admin set-root-password [--password <password>]

in Docker for example:

.. code-block:: bash

    sudo docker compose exec dashboard dashboard-admin set-root-password --password root

If no ``<password>`` is supplied, a password is generated and printed to the terminal.