docs: add auth warning for exposing ports (#8029)

* docs: update authentication guide with security warnings

* reference-auth-section

* auth
This commit is contained in:
Mendon Kissling 2025-05-20 13:13:00 -04:00 • committed by GitHub
commit 695942e391
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -8,15 +8,20 @@ import TabItem from '@theme/TabItem';
This guide covers Langflow's authentication system and API key management, including how to secure your deployment and manage access to flows and components. This guide covers Langflow's authentication system and API key management, including how to secure your deployment and manage access to flows and components.
:::tip :::warning
The Langflow project includes a [`.env.example`](https://github.com/langflow-ai/langflow/blob/main/.env.example) file to help you get started. Never expose Langflow ports directly to the internet without proper security measures.
You can copy the contents of this file into your own `.env` file and replace the example values with your own preferred settings.
Disable `LANGFLOW_AUTO_LOGIN`, use a secure `LANGFLOW_SECRET_KEY`, and ensure your Langflow server is behind a reverse proxy with authentication enabled.
For more information, see [Start a secure Langflow server with authentication](#start-a-secure-langflow-server-with-authentication).
::: :::
## Authentication configuration values ## Authentication configuration values
The section describes the available authentication configuration variables. The section describes the available authentication configuration variables.
The Langflow project includes a [`.env.example`](https://github.com/langflow-ai/langflow/blob/main/.env.example) file to help you get started.
You can copy the contents of this file into your own `.env` file and replace the example values with your own preferred settings.
### LANGFLOW_AUTO_LOGIN ### LANGFLOW_AUTO_LOGIN
When `True`, Langflow automatically logs users in with username `langflow` and password `langflow` without requiring user authentication. When `True`, Langflow automatically logs users in with username `langflow` and password `langflow` without requiring user authentication.