Protect EE Shared Locations

[MiteshShah]

Access phpMyAdmin & Other Shared Locations

1. Allowed IP Adress
2. Extra http Password for non allowed/dynamic ip address

# EasyEngine Shared Settings
location /ee {
        autoindex on;
        alias /var/www/shared/;
        satisfy any;
        include common/allowed_ip.conf;
        #deny all;
        auth_basic "Restricted";
        auth_basic_user_file  htpasswd;
        index index.php index.html index.htm;

[MiteshShah]

This should be default for easyengine for PMA, memcache viewer, etc also.

At the time of setup, we can ask them for static-IP as well as a password for HTTP auth.

[MiteshShah]

Generate htpasswd with

printf "Username:$(openssl passwd -crypt Password)\n" >> /etc/nginx/htpasswd

More Info: http://wiki.nginx.org/Faq

[MiteshShah]

Findout IP Address:

w | grep $(echo $SSH_TTY| cut -d'/' -f3,4) | awk '{print($3)}'

[MiteshShah]

At the time of nginx installation (ee system install nginx)

1. EasyEngine auto detect client IP Address and whitelist
2. Set htpasswd as per described on /etc/easyengine/ee.conf file

Fixed In: 7972ca0 4859a50