VPN protection for certain routes

[dsp76]

Hi,
are there any plans to let users adjust the VPN protection feature? It would be cool to use it for public facing apps too, but only protect the backends via VPN. Often they have a certain route - so it could be filtered by rules?

Examples:

• Mautic has all backend behind /s
• WordPress has all backend behind /wp-admin
• InvoiceNinja has public routes behind /client/

What do you think - is this even feasible?

[luckow]

@dsp76 Unfortunately, that isn’t possible from a technical standpoint. VPNs route traffic using domains or IP addresses at the network layer, not URL paths like /s.

[dsp76]

@luckow what a pitty. Is there another way? Would be some firewall stuff then?

[james]

Hello @dsp76
What you are looking for is WAF (Web Application Firewall).
Cloudron currently has no WAF feature, but we are thinking about it.

Feature request: https://forum.cloudron.io/topic/14982/feature-request-simple-per-app-waf-with-templates-kiss

[p44]

@dsp76 Yes, this could be an useful feature to let access backends only authorized users. So, VPN could be used both: to lock all the apps, or only backends.