How to Secure Exposed Portainer

Step 1.Set admin password

Portainer requires setting a password on first access. If exposed, someone else may have set it.

Step 2.Put behind reverse proxy

Never expose Portainer directly. Use Nginx with TLS.

# Nginx with SSL and auth
location / {
  proxy_pass http://localhost:9000;
}

Step 3.Firewall the port

Block Portainer ports from the internet.

sudo ufw deny 9000
sudo ufw deny 9443