Cloudflare tunnels are layer 7, so it's not unlimited access by any means. This also means that certain things will break btw, for example if your website uses websockets to load information, that isn't supported.
Next, I'd put the computer that is going to be hosting into an isolated vlan of its own and access via external URL only.
If you're going to use docker images, make sure to vet that they're updated often and always spin up the latest.
As a recipient of something similar...I agree, but I wish it wasn't that way. I got my current gig 2 years ago and just got a promo to senior with a sizeable pay raise and bonus. I work remote and out of state from a zero income tax state while keeping my HCOL pay scale.
I think I could go higher, but I'm against the same thing that is helping me out in my current position.
To me, that's basically what networking is in a nutshell
They'll come out of the woods and start claiming he wasn't a true libertarian.
Probably drinking?
Free market ftw rite?
Do you think that running to the ER for a heartburn or tummy aches is something that is acceptable?
We are smart enough and wealthy enough to provide quality, timely care to everyone, if only we could get rid of the greedy idiots in charge.
If not solving a problem makes money...then the problem will not be solved...ever. That's basically it in a nutshell. Capitalism needs greed to work and that is fine if kept in check. Obviously it's not kept in check though. The folks that would do that are compensated by the very folks that make money from the dysfunctional system.
Correct me if I'm wrong, but aren't those places where you're required to take some kind of classes to be able to qualify to own a gun? Isn't it also pretty easy for anyone from the police to be able to take them from you within reason if they find you to be violating some laws?
This is exactly what the alt-right Christian fucks want. I'm surprised that they don't realize how much in common they have with the Taliban.
Sorry dude...writing simple queries is what I said was easy...and for the record they are. That example is probably not a great example. Simply from my experience, I never started my career in IT, I was in healthcare and far from it all.
Anyway, I've had some idiots approach me about their shitty ideas before too...most notably was one person asking to create an app that "uses AI" to help a person search for the right individual when they send a text message. Couldn't explain how it would know that it found the right person? There was another one that wanted to track the origin of "content" and how it changes over time on social media... again "using AI".
For my team I have a mirror that I set up and have a bunch of ELT jobs that load the deltas every night. Queries don't ever run in PROD, if someone needs a specific view or more data, they go through me and my team. I also set timeouts, precisely to avoid the ahole from using Select * from. Also have a bunch of reports I created to see who is running what queries and timings. We review them quarterly or when someone complains or when a project that needs our data asks us for access.
We also have an autogenerated data dictionary for folks to use as well. Generally I don't entertain any "it's slow" complaints unless they go through the documentation, provide their exact query and write what it is they're trying to get.
My assumption was that OPs shop does the bare minimum in terms of making sure they don't shoot themselves in the foot.
That document doesn't say what layer. But it does say it supports Websockets.
Just odd that when I try to set it up using a named tunnel I don't get an option to specify the WS service type. However it does require a service type if you want to connect to it.
Looking at this page it would seem that it's a layer 7. Although I could be wrong, but my front end app has issues finding my backend service for websockets.
Granted I even tried to connect to my private computer using other protocols. I couldn't get through. Anyway I'm most likely going to be taking that project offline soon.