Add warning about secure access for API to docs

AlexxIT · Jan 11, 2024 · 8793c36 · 8793c36
1 parent 59d25c1
commit 8793c36
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -790,6 +790,8 @@ streams:
 
 The HTTP API is the main part for interacting with the application. Default address: `http://localhost:1984/`.
 
+**Important!** go2rtc passes requests from localhost and from unix socket without HTTP authorisation, even if you have it configured! It is your responsibility to set up secure external access to API. If not properly configured, an attacker can gain access to your cameras and even your server.
+
 [API description](https://github.com/AlexxIT/go2rtc/tree/master/api).
 
 **Module config**