Page:
Security
Pages
Architecture.de
Architecture
Backup and Restore.de
Backup and Restore
Base Image.de
Base Image
Build System.de
Build System
CI CD Pipeline.de
CI CD Pipeline
Compose Runtime.de
Compose Runtime
Configuration.de
Configuration
Container Images.de
Container Images
Database Backends.de
Database Backends
Developer Guide.de
Developer Guide
Docker Desktop WSL Windows.de
Docker Desktop WSL Windows
FAQ.de
FAQ
Firebird.de
Firebird
Home.de
Home
Java Property Agent.de
Java Property Agent
Local Build Scripts.de
Local Build Scripts
Microsoft SQL Server.de
Microsoft SQL Server
Migration Client.de
Migration Client
Migration Service.de
Migration Service
Migration Workflow.de
Migration Workflow
Payload Images.de
Payload Images
Project Overview.de
Project Overview
Project Structure.de
Project Structure
Quick Start.de
Quick Start
Reference BUILD.de
Reference BUILD
Reference DEVELOPERS.de
Reference DEVELOPERS
Reference MIGRATION_README.de
Reference MIGRATION_README
Reference MIGRATION_WORKFLOW.de
Reference MIGRATION_WORKFLOW
Reference README compose.de
Reference README compose
Reference README.de
Reference README
Release Process.de
Release Process
Romexis Admin.de
Romexis Admin
Romexis Client.de
Romexis Client
Runtime Layout.de
Runtime Layout
Security.de
Security
Server Image.de
Server Image
Source README References.de
Source README References
Synology ContainerStation.de
Synology ContainerStation
Troubleshooting.de
Troubleshooting
mRomexis WebApp.de
mRomexis WebApp
Clone
2
Security
Patrick Gniza edited this page 2026-08-17 10:48:39 +02:00
Deutsch | English
Security
Repository Security
The repository must not contain proprietary Romexis application binaries.
Installer packages are downloaded during payload builds from official URLs.
Secrets
Sensitive values should come from:
.env
Drone secrets
Docker Compose environment
external secret stores
Important values:
MSSQL_SA_PASSWORD
ROMEXIS_DB_PASSWORD
FIREBIRD_PASSWORD
MIGRATION_API_TOKEN
SFTP passwords
Registry credentials
Migration Service Security
Migration jobs create temporary SFTP credentials.
Rules:
- credentials should be unique per job
- credentials should be removed after completion
- cancelled jobs should remove credentials
- completed jobs should not recreate SFTP users on startup
- failed jobs should not recreate SFTP users unless explicitly reactivated
Network Exposure
Expose only required ports.
Typical ports:
Romexis RMI ports
MSSQL 1433, if external access is required
Firebird 3050, if external access is required
Migration Web UI 8080
Migration SFTP 2222
For production, place services behind appropriate firewall rules.
File Permissions
Persistent directories must be writable by the relevant container users.
Special care is required for:
/var/opt/mssql
/firebird/data
/data/romexis_images
/data/romexis_ergodata
/data/romexis_cache
Production Notes
Before production use:
- change all default passwords
- restrict exposed ports
- use HTTPS/reverse proxy for the migration Web UI
- use strong API tokens
- remove test migration jobs
- verify backup/restore procedures
Romexis Docker Wiki
English
Getting Started
- Project Overview
- Architecture
- Quick Start
- Synology Quick Start
- Use with Docker + WSL in Windows
- Compose Runtime
- Configuration
- Container Images
Runtime Services
- Romexis Admin
- Romexis Client
- mRomexis Web App
- Runtime Layout
- Backup and Restore
- Troubleshooting
- Security
Build System
Database
Migration
Development
Source Documents
Deutsch
Erste Schritte
- Projektübersicht
- Architektur
- Schnellstart
- Synology Quick Start
- Nutzung mit Docker + WSL unter Windows
- Compose-Runtime
- Konfiguration
- Container-Images
Runtime-Dienste
- Romexis Admin
- Romexis Client
- mRomexis Web App
- Runtime-Layout
- Sicherung und Wiederherstellung
- Fehlerbehebung
- Sicherheit
Build-System
Datenbank
Migration
Entwicklung
Quelldokumente
Romexis Docker Project Wiki / Romexis-Docker-Projekt-Wiki
English Home · Deutsche Startseite · English source documents · Deutsche Quelldokumente · Security · Sicherheit
Internal operations and development wiki / Internes Betriebs- und Entwicklungswiki