Registration or how to shoot yourself in the foot

[immense]

Registration or how to shoot yourself in the foot

[bitbound]

Resolved in commit 6560cae.

[bitbound]

1. As mentioned in my other answer, Remotely is configured to run behind IIS or Nginx. The only ports exposed are those that IIS or Nginx are configured to listen on. Direct access to the ASP.NET Core web host (Kestrel) isn't possible from the outside. The client install script has the target host dynamically set based on the request's current URL. You'll want to download the script from the publicly-accessible URL (or manually set it in the PS1 file).

2. You can turn self-registration off in appsettings.json by setting the AllowSelfRegistration value. I don't want this off by default since someone would have to turn it on anyway the first time they deploy and register themselves. I don't yet have a mechanism for marking a user as a server administrator vs. an organization administrator, so I'm not ready to expose application-related settings. But I do want to do that down the road. For now, I might just show a reminder prompt on the first registration.

3. Yeah, that's a problem. I'll need to add that.