jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

docs: add auth warning for exposing ports (#8029)

Browse source 
* docs: update authentication guide with security warnings

* reference-auth-section

* auth
This commit is contained in:
Mendon Kissling 2025-05-20 13:13:00 -04:00 • committed by GitHub
commit 695942e391
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/docs/Configuration/configuration-authentication.md
View file

@ -8,15 +8,20 @@ import TabItem from '@theme/TabItem';
This guide covers Langflow's authentication system and API key management, including how to secure your deployment and manage access to flows and components.
:::tip
The Langflow project includes a [`.env.example`](https://github.com/langflow-ai/langflow/blob/main/.env.example) file to help you get started.
You can copy the contents of this file into your own `.env` file and replace the example values with your own preferred settings.
:::warning
Never expose Langflow ports directly to the internet without proper security measures.
Disable `LANGFLOW_AUTO_LOGIN`, use a secure `LANGFLOW_SECRET_KEY`, and ensure your Langflow server is behind a reverse proxy with authentication enabled.
For more information, see [Start a secure Langflow server with authentication](#start-a-secure-langflow-server-with-authentication).
:::
## Authentication configuration values
The section describes the available authentication configuration variables.
The Langflow project includes a [`.env.example`](https://github.com/langflow-ai/langflow/blob/main/.env.example) file to help you get started.
You can copy the contents of this file into your own `.env` file and replace the example values with your own preferred settings.
### LANGFLOW_AUTO_LOGIN
When `True`, Langflow automatically logs users in with username `langflow` and password `langflow` without requiring user authentication.