Security Issues

SSL Certificate

WebPI install script runs openssl, to create self-signed certificate, and is applied on server.

Note that is self-signed.

APACHE_RUN_USER set as pi :(

Due to file operations, apache will run as pi permission.

If you don't want that, remove APACHE_RUN_USER option on .envs/.env.prod