Skip to main content

Security

What data is stored?​

The system stores:

  • Node IP address (URL)
  • Password hash (we don't store passwords in plain text)
  • Performance metrics (response time, RAM, CPU, blocks, etc.)
  • Telegram chat ID (if alerts are enabled)
  • Measurement timestamps

How is data secured?​

  • Passwords are hashed – We use bcrypt for secure password storage
  • HTTPS – Using HTTPS for communication with the panel is recommended
  • Authorization – Operations on the node require entering a password
  • Database – Data is stored in a secure PostgreSQL database

Does monitoring have access to private keys?​

NO. Monitoring doesn't have access to private keys or the wallet. The system only reads public metrics from the /status and /metrics endpoints, which are publicly available on port 6539.

Security Best Practices​

  • Don't publicly share the RPC address – Use a firewall to limit access
  • Use strong passwords
  • Limit access to port 6539 – Allow only trusted IP addresses
  • Regularly update the node – Use the latest software versions
  • Monitor logs – Check node logs for suspicious activity