Control Panel Security HestiaCP

estedo · July 8, 2022, 1:20pm

Greetings to all once again!
I would like to know the answer to 2 questions.

Is it possible to install the panel on a subdomain, i.e. on dev.sayt.ru - I plan to do this so that the panel opens only at this address.
How to make access to the control panel admin panel (in other words, to the panel itself) only from a specific domain, that is, so that everything opens with just one link. (I want to protect myself from intruders, hide the panel). - Perhaps you can tell me the most correct way to do this, the point is to hide the control panel from prying eyes.

nada · July 8, 2022, 1:27pm

hello @estedo

1- yes sure
2- use iptables or csf both available and add cloudflare firewall choose your most suitable

estedo · July 8, 2022, 2:06pm

How will this help me hide the panel from other people besides me?

estedo · July 8, 2022, 2:10pm

After all, the control panel is available from any domain in the panel by adding: 8083

eris · July 8, 2022, 2:46pm

Yes, It is currently not possible to limit access from any domain

Option one is close port 8083

And create a hostname.domain.com and then download

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.tpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_port%;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
        
    include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;

    location / {
    return 301 https://%domain_idn%/;
    }

    location /error/ {
        alias   %home%/%user%/web/%domain%/document_errors/;
    }

This file has been truncated. show original

and

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.stpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_ssl_port% ssl http2;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
    ssl_certificate      %ssl_pem%;
    ssl_certificate_key  %ssl_key%;
    ssl_stapling on;
    ssl_stapling_verify on;
    error_log  /var/log/%web_system%/domains/%domain%.error.log error;

    include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;

    location / {
        proxy_pass      https://%ip%:8083;
    }

This file has been truncated. show original

And save them in /usr/local/hestia/data/templates/web/nginx

On the domain enable then cp as proxy template