Hiding apps behind the proxy app to enable cloudron authentication
-
Hello,
We are using Cloudron (v9) to host several applications that do not support native Cloudron user authentication. To standardise access control, we have introduced a proxy app (running on the same Cloudron instance) that authenticates users and then forwards traffic to the target application. This is done by routing traffic internally using the 172.* Docker network IP and the app’s internal port, ensuring that users must authenticate before reaching the target app.
However, the proxy and the target app each have their own subdomain. The proxy correctly enforces Cloudron authentication, but the target app remains externally accessible via its own subdomain, bypassing the intended protection.
What would be the cleanest, most durable way to prevent external access to the target app’s subdomain, so that it is reachable only through the proxy? We are trying to avoid custom modifications or unsupported hacks that might break updates or interfere with Cloudron’s normal operation.
Thank you in advance for your guidance.
-
Hello @vk182 and welcome to the Cloudron forum
@vk182 said in Hiding apps behind the proxy app to enable cloudron authentication:
host several applications that do not support native Cloudron user authentication
Are these custom apps or are you running them inside e.g.: the LAMP app?
