AcraServer web UI

[gene-eu-zz]

This is for the very distant future - a ticket to accumulate all suggestions for Web UI to control AcraServer. Each suggestion will turn into separate issue.

[ ] Enable WebUI via port knocking
[ ] MFA Authenticate WebUI via side channel (OTP delivery integration)

[gene-eu-zz]

(recording the conversation)

WebUI is a part of attack surface for crown's jewels, so we need it to be as secure as possible

[ ] Preferably, simple stateless interface
[ ] Typesafe inputs
[ ] OTP
[ ] Run WebUI as a parallel service in parallel user/container: harder to install, at least some compartmentation if attacker does RCE / fallthru
[ ] WebUI <> AcraServer via strong typed API, in a Thrift-like fashion (we will accept your garbage, we just won't process it anywhere).
[ ] IP ACL

[vixentael]

Implemented separate service for web UI config page with graceful restart. PRs: #123 #111

Some things like basic auth are moved into internal task tracker. Other suggestions are prioritized and put into backlog.

Will close this issue during release preparations

[vixentael]

docs -->
https://github.com/cossacklabs/acra/wiki/AcraConfigUI