Automation
Temporal
High risk because Temporal has NO authentication: anyone who can reach the gRPC port can start, signal and terminate workflows. By default the web page and gRPC listen on 127.0.0.1 only. If you expose the web page it is read-only unless you allow changes. Runs the server, PostgreSQL and the UI as containers. Needs about 2 GB of memory.
What it does
Automation Installers
What you will be asked
You fill these in during setup.
- Web interface port RequiredAdvanced settingsThe port the web interface listens on. The default is fine unless another service already uses it.
- gRPC (client connections) port RequiredAdvanced settingsThe port the grpc (client connections) listens on. The default is fine unless another service already uses it.
- Expose the web interface RequiredAdvanced settingsWhen false (default) the Temporal web page listens on 127.0.0.1 only (reach it with an SSH tunnel). When true it listens on all addresses and, because Temporal has no login, anyone who finds the address can read your workflows; it is then read-only unless you also turn on Allow changes from the web interface.
- Allow changes from the web interface RequiredAdvanced settingsOnly matters when Expose the web interface is true. When false (default) the exposed web page is read-only (start, signal, terminate and other write actions are switched off). When true anyone who can reach the page can change or stop your workflows.
- Expose the gRPC port RequiredAdvanced settingsWhen false (default) the gRPC port that workers and clients connect to listens on 127.0.0.1 only. When true it listens on all addresses with no authentication: restrict it with a firewall first.