[feature request] Add configuration option to disable the /debug/vars HTTP API endpoint

[rossmcdonald]

Currently the /debug/vars endpoint is not protected by HTTP authentication, which could expose inadvertent debug information to anyone with network access to the InfluxDB instance. Adding the ability to disable this endpoint via configuration would prevent this issue.

[francisdb]

This is a serious issue:
https://www.shodan.io/search?query=influxdb

Is there a way to set up authentication for this resource?

[rossmcdonald]

Currently the only way to restrict access to the /debug/vars resource is by putting InfluxDB behind a proxy and enforcing authentication (or simply disallowing requests to /debug) at the proxy level.

[alekseyp]

I would love to see authentication here too.

[russorat]

this was added via #15222 and will be available in the 1.8 release. You can try it out by building the 1.8 branch.