Alternative https port for admin API/UI

[harf18]

Proposal

Can you consider adding an option to choose a different https port for the admin API & UI ?

Benefit

We will be able to bloc traffic from internet on this port with a firewall and open it only for internals IPs and enforce the security.

[mathieuancelin]

Hi @harf18

it would be a great feature and at first I wanted to do it this way but it's not compatible with the deployment model of Clever-Cloud I decided to do it the way it's done right now.

However maybe we can do something here. One solution could be to have a flag to enable/disabled the rendering and the exposition of admin related stuff for the Otoroshi instance facing public access and deploying another Otoroshi instance in your internal network that connect to the same datastore.

Also, in a near future, Otoroshi will have a master / workers mode (#8) that could fix this issue.

[harf18]

Thanks @mathieuancelin
Your proposition with flag & 2 Otoroshi instances looks perfect and more flexible than 2 ports !

[mathieuancelin]

I've created issue #49 for the new feature and I'm closing this one.

Thanks for the report :)

[mathieuancelin]

app.backoffice.exposed and app.adminapi.exposed has been added to Otoroshi v1.0.2 config. file to expose or not the admin api and admin dashboard