Skip to content

Security: artaasd95/chat-bot-RAG-showcase

Security

docs/security.md

Security Hardening Checklist

  • Replace the default SECRET_KEY with a strong, random value set via environment variable.
  • Rotate admin credentials regularly and store them securely (e.g., Azure Key Vault or AWS Secrets Manager).
  • Store database passwords and other secrets in environment variables; never commit them to source control.
  • Enable HTTPS termination at the Nginx reverse proxy.
  • Implement rate limiting with slowapi to mitigate brute‑force attacks.
  • Use OpenTelemetry to monitor request latency and error rates.
  • Perform regular dependency scans with safety and bandit.
  • Apply least‑privilege IAM roles for any cloud resources (e.g., Key Vault, S3 bucket).

There aren't any published security advisories