Protect apps by source IP/domain

[bazinga]

Hi,

You've added VPN protection to apps. I think it'd be highly useful to additionally have a way to whitelist IPs and domains, which are allowed to access an app (on a per-app basis, similar to VPN protection).

IP whitelisting makes apps protection way easier and less challenging - no need to run VPNs on endpoints or go through a complicated and undocumented process of setting up a VPN tunnel on the edge. No complications with internal network routing on the server. Simple Dynamic DNS setups would allow users with dynamic IPs to continue accessing those apps.

Those wanting to protect their traffic when on open WiFi in public places could either VPN into their home/office/etc. location (which would be whitelisted) or opt for an already existing VPN protection.

Thanks.

PS: I had to go through a lot of pain setting up a VPN tunnel on my OpenWRT router to avoid running VPN clients on all of my devices. But now I have to have a persistent VPN tunnel to my Cloudron, which I don't like one bit. IP whitelisting would be a great solution here. And when I'm away I can always VPN into my OpenWRT router and access protected apps.

[robi]

This would be fairly easy if taking cues from all dashboard login IPs and updating the nginx allow list for all apps that are protected.