Security
Groove Builder is designed to run inside your network boundary.
Practices
- Keep the instance and dependencies updated.
- Use HTTPS / TLS at the reverse proxy or ingress.
- Restrict signup; prefer SSO and least-privilege roles.
- Store datasource secrets in encrypted datasource fields.
- Configure frame ancestors when embedding apps.
- Back up MongoDB and secrets regularly.
- Do not point cloud-services URLs at third-party Appsmith endpoints.