Bind UI to specific networks, interfaces, ip’s

[MK796]

Hello 😁

are there plans to restrict ui access to specific networks, interfaces and ip's?

My goal would be to move the UI behind a VPN.

Cheers,
Marvin

PS as always your "beta" software is already awesome!

[miloschwartz]

If what you mean is accessing Pangolin via an internal address of your server like 192.168.1.69:3002, and not exposing it publicly, then this should be available in the next upcoming beta release. I had to get this working for the best user experience on Unraid, for which support is coming soon as well.

The caveat, however, is the dashboard should still be accessible publicly if you plan to use the forward auth features.

[MK796]

Hello!

Thanks for your answer!

Exactly, what I meant.

Is there a way to solve the from
you mentioned caveat?

[miloschwartz]

The way that our authentication system works right now is users are redirected to the dashboard to complete their login (or enter password, pin, etc). If the dashboard is not accessible by your domain, they would have no way to complete authentication steps.

You could use a different auth provider, or disable Pangolin's auth for each of your resources if you still don't want to make the dashboard public.

This is how Pangolin works right now, and may change in the future if we see that the community doesn't want to expose their Pangolin dashboard, like you suggested.

[MK796]

Thank you for your answer! Much appreciated.

[miloschwartz]

Posting here to let you know that as of 1.0.0-beta.6 you can have a more open CORS policy to make it easier/enable you to access the Pangolin dashboard by an internal address in your browser. Previously the CORS policy would prevent the dashboard from communicating with the API.

If you updated the migration script should have set the CORS policy for you. You can either remove it all together or add your local address to the allowed origin. You can see more info how this can be configured here: https://docs.fossorial.io/Pangolin/Configuration/config#server