How to block tipi dashboard port without blocking the others apps
Hello, I'm on a online server where I have my tipi instance and I wonder how can I block the access to the tipi dashboard without blocking the others apps
The tipi dashboard is on port 80 but its used by the proxy so I can't (I think) block directly the port 80, is that a solution maybe with Traefik or something else to resolve this ?
1 Reply
there is a github discussion https://github.com/runtipi/runtipi/discussions/1212
which also has this topic as a point.
in the current setup it is not easy to change that behaviour.
what i do is use traefik middlewares to forward the access to the dashboard via authentik, and add geo blocking:
https://github.com/falkheiland/user-config/blob/main/tipi-compose.yml
https://github.com/falkheiland/user-config/blob/main/README.md
as a minimum addition to restrict access to the dashboard (and possible added apps on the guest dashboard) you could add a basic-auth middleware.
GitHub
dashboard: exposure / app call-up / default certificate · runtipi r...
Hi! i had a discussion with @meienberger on discord regarding expose of the dashboard and will try to explain some issues / ideas / suggestions i do have. i hope you can follow my thoughts, since t...
GitHub
user-config/tipi-compose.yml at main · falkheiland/user-config
user configs for runtipi apps. Contribute to falkheiland/user-config development by creating an account on GitHub.
GitHub
user-config/README.md at main · falkheiland/user-config
user configs for runtipi apps. Contribute to falkheiland/user-config development by creating an account on GitHub.