From 430cf8fcf94cf95c70165b03f1061ae9dea44e84 Mon Sep 17 00:00:00 2001
From: "Joshua M. Boniface" <joshua@boniface.me>
Date: Sun, 31 Oct 2021 01:38:18 -0400
Subject: [PATCH] Add warning about lack of TLS

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index de04c07..ed432ea 100644
--- a/README.md
+++ b/README.md
@@ -50,6 +50,8 @@ The Flask API portion listens for webhooks from a compatible Git system, and the
    $ bbuilder --listen-addr 127.0.0.1 --listen-port 4000
    ```
 
+   **NOTE:** The API server does *not* use TLS/HTTPS. If you need SSL - and you do if this webhook will traverse the public Internet - add a reverse proxy in front of the API.
+
 1. Run a worker with the following command:
 
    ```