Restrict public access of apps in settings

[ekevu123]

Is there a way to restrict public access of apps if the app itself doesn't support it? The user management feature in Cloudron doesn't really help here.

I'd love to settle for a general password protection, so that I can give the password only to designated users and I'd be glad to get public access restricted to cloudron users only too.

[jdaviescoates]

@ekevu123 said in Restrict public access of apps in settings:

Is there a way to restrict public access of apps if the app itself doesn't support it?

Can you give an example of an app doesn't support it that you'd like to do this with?

@ekevu123 said in Restrict public access of apps in settings:

The user management feature in Cloudron doesn't really help here.

Why not?

AFAIK most Cloudon app that don't have authentication built in have the proxy auth addon (I think it's called) enabled so you can still restrict access using that.

[robi]

Surfer has a way to set a password which can then redirect to any URL, and technically the app proxy could gate any other apps if it had a pw feature.

[ekevu123]

Any app that doesn't have user accounts would be an example. Or, more precisely, I was looking into Jirafreau, which allows to upload files quickly and create a link with our domain. But I wouldn't want any user to do that.

I didn't know aboiut app proxies, but I will check if this solves the problem!

[jdaviescoates]

@ekevu123 said in Restrict public access of apps in settings:

Any app that doesn't have user accounts would be an example. Or, more precisely, I was looking into Jirafreau, which allows to upload files quickly and create a link with our domain. But I wouldn't want any user to do that.

I didn't know aboiut app proxies, but I will check if this solves the problem!

Yeah, I agree, @staff should add the proxy auth addon thing option to the Jirafreau app.

I just have my install completely open and so far no one random has ever used it, but it'd be nice to lock it down if need be.

[girish]

As @jdaviescoates said, please just raise an issue in the corresponding app and we can add the proxyAuth configuration to the app.

One thing is note that proxyAuth might not behave as you expect at times. For example, with jirafeau, the URLs won't be public anymore as well i.e only (cloudron) authenticated users can use it. This can be misleading to your users. Is this your expectation?

[girish]

Actually, jirafeau supports restricting uploads already - https://docs.cloudron.io/apps/jirafeau/#restricting-uploads . This is why we didn't add proxyAuth.

[ekevu123]

Oh, wow, that password restriction is what I need, thank you! And, yes, the download should be public, that is sort of the idea.