khanh.pndc/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-01-02 17:59:36 +07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12059 from nextcloud/feat/restrict-admin

Browse Source
This commit is contained in:
Benjamin Gaussorgues
2024-07-24 16:10:41 +02:00
committed by GitHub
parent 0eb123e427 b5f414b989
commit a4e2c37134
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
admin_manual/installation/harden_server.rst
View File

@@ -177,6 +177,23 @@ information about the TLS settings.
Also ensure that HTTP compression is disabled to mitigate the BREACH attack.
Restrict admin actions to a specific range of IP addresses
----------------------------------------------------------
Configure ``allowed_admin_ranges`` in ``config.php`` to restrict the admin actions to trusted IP ranges.
This can be achieved with this kind of setting, usually using private IP ranges::
'allowed_admin_ranges' => [
'127.0.0.1/8',
'192.168.0.0/16',
'fd00::/8',
]
All requests originating from IP addresses outside of these ranges will not be able to execute admin actions.
Administrators connected from untrusted IP addresses will be able to use Nextcloud, but all admin specific actions will be hidden.
Use a dedicated domain for Nextcloud
------------------------------------