The title says it all; I'm just serving data to coworkers as a courtesy via a series of single-page apps that I basically consolidated under Flask, serving Jinja templates. Presently, I have Apache running, and I just drop static HTML files in the path. But this was before employing Flask or a template engine and I'm unwilling to let it grow to the point that it becomes harder to maintain as a bunch of static HTML.
So in order to make the switch, I can either set up Apache to forward requests to my Flask app, or (b) just turn off Apache, tell my Flask app to
app.run(host='0.0.0.0', port=80) and then
sudo python myApp.py, done and done.
So is this unsafe? I can't speak to the level of security that our sysadmin employs to prevent outsiders from trolling around our local network, except that "it exists". Our LAN is regarded as inaccessible from the outside, but honestly I don't know anything about this kind of thing. Seems to me that if I can post on Stack Overflow from this computer, Someone Somewhere can see my app running and do Bad Things. I also understand this to be the less preferred practice, especially when something is supposed to be publicly available - but again, I'm just in the office here, and if I don't have to goof around with Apache .conf files then I'm happy to leave them alone and just turn Apache right off.
Am I setting myself up for a giant security fail, or is this fine within this context?