How to Make Admin panel accessbile via Localhost only

SHIVA SURYA

How to access admin panel in my localhost while the forum will be used over lan...so i need to secure my admin panel against brute force. or
login admin panel with specific ip alone

psychobunny

I would probably use your proxy (nginx/apache) to block requests to /admin

This is probably the more recommended approach, than building the feature into nodebb itself

julian

YMMV but give this a try:

location /admin {
    allow 127.0.0.1;
    deny all;
}

SHIVA SURYA

@julian and @psychobunny thanks for the answer! let me try it!

rbeer

@psychobunny @julian
A special user/group for the ACP would be nice to have, though.

I am thinking in terms of: Intrusion starts with spotting the user with desired credentials. This way administrator/moderator/team accounts couldn't be targets to any attacks. As such a username (account with ACP access) wouldn't be exposed to the public, whatsoever.

But since many BBs, for many years did well without it, I come around to the first line: "Nice to have".