Securing Admin Interface

[theTaikun]

Looking at the docs, I don't see any method of securely managing Isso, as /admin listens on the same public endpoint.

My ideas are either:

• a CLI that can be pointed at localhost for management, and disabling the /admin endpoint
• a more robust auth method like external oidc/oauth/etc...
• isolating /admin to listen on a different port/socket, such as only accessible via LAN/VPN

Or is this something expected to be configured in the proxy?

[jelmer]

I'd expect you to configure this in a reverse proxy.