Close access to the panel

estedo · April 17, 2022, 4:01pm

Greetings! How to close access to the panel and service links (phpmyadmin and the like)? The panel itself is located on the technical domain, but when adding other domains to the control panel, the panel also has access from them. Is it possible to somehow restrict access to the panel from added domains and leave access only from the technical domain?

webmasteroffers · April 17, 2022, 5:00pm

I have the same question

If I want protect the CP login using Basic HTTP Authentication - Which folder should I protect?

estedo · April 17, 2022, 6:23pm

I just consider it safe to have access to the control panel from all domains, for this I use the technical domain so that only I know it and, accordingly, access to the panel is made only from one domain.

eris · April 18, 2022, 7:59am

You can’t currently

For Hestia admin you can use IPlists to only allow your ip (min 10 ip adresses) and add it to iptables

Or just enter your ip in firewall and block all other traffic

Option 2:
You can limit access to a specific account to an ip.

Option 3: Enable 2FA

Option 4: Disable port 8083 completely and use

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.stpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_ssl_port% ssl http2;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
    ssl_certificate      %ssl_pem%;
    ssl_certificate_key  %ssl_key%;
    ssl_stapling on;
    ssl_stapling_verify on;
    error_log  /var/log/%web_system%/domains/%domain%.error.log error;

    include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;

    location / {
        proxy_pass      https://%ip%:8083;
    }

This file has been truncated. show original

and

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.tpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_port%;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
        
    include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;

    location / {
    return 301 https://%domain_idn%/;
    }

    location /error/ {
        alias   %home%/%user%/web/%domain%/document_errors/;
    }

This file has been truncated. show original

or

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/php-fpm/cp.stpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%web_ssl_port% ssl http2;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
    ssl_certificate      %ssl_pem%;
    ssl_certificate_key  %ssl_key%;
    ssl_stapling on;
    ssl_stapling_verify on;
    error_log  /var/log/%web_system%/domains/%domain%.error.log error;

    include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;

    location / {
        proxy_pass      https://%ip%:8083;
    }

This file has been truncated. show original

and

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/php-fpm/cp.tpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%web_port%;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
        
    include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;

    location / {
    return 301 https://%domain_idn%/;
    }

    location /error/ {
        alias   %home%/%user%/web/%domain%/document_errors/;
    }

This file has been truncated. show original

Depending on your setup

For disabling phpmyadmin
Change /etc/apache2/conf.d/phpmyadmin.inc and /etc/nginx/conf.d/phpmyadmin.inc to phpmyadmin2.inc and create a new template or modify the template used above to include phpmyadmin2.inc instead of phpmyadmin.inc

system · May 18, 2022, 8:00am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.