updated readme with recent changes
Massimo Melina committed
May 17, 2024 at 11:54 UTC
69e290fdbecfd666094336582dcf01b5ad341411
1 file changed
+7
-4
README.md
+7
-4
@@ -34,7 +34,7 @@ This is a full rewrite of [the Delphi version](https://github.com/rejetto/hfs2).
34
- accounts
35
- resumable downloads & uploads
36
- download folders as zip archive
37
-- remote delete
37
+- delete, move and rename files
38
- simple website serving
39
- plug-ins
40
- real-time monitoring of connections
@@ -43,10 +43,13 @@ This is a full rewrite of [the Delphi version](https://github.com/rejetto/hfs2).
43
- geographic firewall
44
- admin web interface
45
- multi-language front-end
46
-- virtual hosting (plug-in)
46
+- virtual hosting
47
- anti-brute-force (plug-in)
48
- [reverse-proxy support](https://github.com/rejetto/hfs/wiki/Reverse-proxy)
49
- comments in file descript.ion
50
+- integrated media player
51
+- [customizable with html, css and javascript](https://github.com/rejetto/hfs/wiki/Customization)
52
+- dynamic-dns updater
53
54
## Installation
55
@@ -169,14 +172,14 @@ But you may still want to stay with HFS 2.x (so far) for the following reasons
172
173
While this project focuses on ease of use, we care about security.
174
- HTTPS support
172
-- Passwords are not saved, and user password is safe even logging in without https thanks to [SRP](https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol)
175
+- Passwords are not saved, and not disclosed even without https thanks to [SRP](https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol)
176
- Automated tests ran on every release, including libraries audit
177
- No default admin password
178
179
Some actions you can take for improved security:
180
- use https, better if using a proper certificate, even free with [Letsencrypt](https://letsencrypt.org/).
181
- have a domain (ddns is ok too), configure it in "Internet" page, and enable "Accept requests only using domain"
179
-- install rejetto/antidos plugin
182
+- install "antidos" plugin
183
- ensure "antibrute" plugin is running
184
- disable "unprotected admin on localhost"
185