Making flask app secure

[final rain]

Hello I have a simple flask app that is triggering some devices in my facility. I currently have cors and a secret-key needed in header in order for request to go through.
How can I make my flask app more secure? do I need to set up gunicorn and nginx when deploying on railway? Open to any advice thank you
ps. I am not expecting a ton of traffic to be hitting my endpoint

[faint knot]

Project ID: N/A

You might find these helpful:

• Setting up flask server
• Trying to increase the time a POST request stays open in railway with flask

⚠️ experimental feature

[final rain]

N/A

[dapper spire]

you dont already have gunicorn?

[final rain]

no 😅

[dapper spire]

so you're using flasks in-built server?

[final rain]

atm yes

[dapper spire]

funky

use gunicorn, though it's not like that increases security

I'm sure there's lots of tutorials on securing a flask + gunicorn app