<![CDATA[VPN protection for certain routes]]>Hi,
are there any plans to let users adjust the VPN protection feature? It would be cool to use it for public facing apps too, but only protect the backends via VPN. Often they have a certain route - so it could be filtered by rules?

Examples:

  • Mautic has all backend behind /s
  • WordPress has all backend behind /wp-admin
  • InvoiceNinja has public routes behind /client/

What do you think - is this even feasible?

]]>https://forum.cloudron.io/topic/16270/vpn-protection-for-certain-routesRSS for NodeTue, 10 Nov 2026 17:00:01 GMTMon, 09 Nov 2026 16:48:18 GMT60<![CDATA[Reply to VPN protection for certain routes on Tue, 10 Nov 2026 09:56:07 GMT]]>@dsp76 Yes, this could be an useful feature to let access backends only authorized users. So, VPN could be used both: to lock all the apps, or only backends.

]]>https://forum.cloudron.io/post/132651https://forum.cloudron.io/post/132651Tue, 10 Nov 2026 09:56:07 GMT<![CDATA[Reply to VPN protection for certain routes on Tue, 10 Nov 2026 09:53:53 GMT]]>Hello @dsp76
What you are looking for is WAF (Web Application Firewall).
Cloudron currently has no WAF feature, but we are thinking about it.

Feature request: https://forum.cloudron.io/topic/14982/feature-request-simple-per-app-waf-with-templates-kiss

]]>https://forum.cloudron.io/post/132650https://forum.cloudron.io/post/132650Tue, 10 Nov 2026 09:53:53 GMT<![CDATA[Reply to VPN protection for certain routes on Tue, 10 Nov 2026 07:42:34 GMT]]>@luckow what a pitty. Is there another way? Would be some firewall stuff then?

]]>https://forum.cloudron.io/post/132643https://forum.cloudron.io/post/132643Tue, 10 Nov 2026 07:42:34 GMT<![CDATA[Reply to VPN protection for certain routes on Mon, 09 Nov 2026 19:09:54 GMT]]>@dsp76 Unfortunately, that isn’t possible from a technical standpoint. VPNs route traffic using domains or IP addresses at the network layer, not URL paths like /s.

]]>https://forum.cloudron.io/post/132638https://forum.cloudron.io/post/132638Mon, 09 Nov 2026 19:09:54 GMT