Back

Restrict Access to Appwrite Console?

  • 0
  • Self Hosted
  • General
  • Web
ORIZON
25 Apr, 2023, 16:57

Can I restrict access to appwrite Console? Because my website uses "api.example.com" to fetch Data. And I Don't want my visitors to go to the Console and Bruteforce Me.

Is there a way , Only a Certain IP can access console while Others can access appwrite API?

TL;DR
The user is asking if they can restrict access to the Appwrite console. There is no direct way to achieve this, but one suggestion is to create a temporary server with a regular docker-compose file and remove the MariaDB service. Then adjust the `.env` fields to point to the MariaDB server and run the migrate command. After that, the user can change all the image versions to 1.3.1. However, this process may not be easy on the first try. Another user suggests upgrading by changing the version in the Docker Compose.yaml file. There is a discussion about the difference between `api.app.com` and
Binyamin
25 Apr, 2023, 16:58

For now there is no blocking console access by IP or any other way.

You can see here for more deatils about a workaround closing the console access https://discord.com/channels/564160730845151244/1094675810792767518/1094787127167954974

Binyamin
25 Apr, 2023, 17:00

Do notice that the login route is not within the /console/ url

So the attacker may be able to bruteforce your password (unlikely as there many protection for that in the code) they still won't be able to access the console it self

ORIZON
25 Apr, 2023, 17:01

I'm checking it now

ORIZON
25 Apr, 2023, 17:21

What is the Difference between api.app.com & api.app.com/console?

Binyamin
25 Apr, 2023, 17:22

It gos like this

  1. api.app.com/v1 - All your public apis
  2. api.app.com/console - Appwrite Admin backoffice
  3. api.app.com - The main entry point which includes few general use routes - This also must be public
ORIZON
25 Apr, 2023, 17:26

"api.app.com" So If i Come to this Url then I can see the Login console but If I block "api.app.com/console" I can't login. Thats what you are saying right?

Binyamin
25 Apr, 2023, 17:29

I mean they can login if they have the password But, after the login when they should be redirect then they will get block by Cloudflare zero

ORIZON
25 Apr, 2023, 17:29

Got it. Thanks.

ORIZON
25 Apr, 2023, 17:29

<:appwriteheart2:1073243188954935387>

ORIZON
25 Apr, 2023, 17:43

And One more thing @Binyamin

Binyamin
25 Apr, 2023, 17:43

Sure

ORIZON
25 Apr, 2023, 17:44

For Upgrading from 1.2.1 to 1.3.1, Can i just change the appwrite:1.2.1 to appwrite:1.3.1. in Docker Compose.yaml file? Will it be Upgraded

ORIZON
25 Apr, 2023, 17:48

?

Binyamin
25 Apr, 2023, 17:49

No, Upgrading is pretty easy (Just make sure to backup your data before).

You can follow the details here https://appwrite.io/docs/upgrade

ORIZON
25 Apr, 2023, 17:50

I'm Using Kubernetes, So I can't run the Migrate Command

ORIZON
25 Apr, 2023, 17:50

I need to update each container individually

Binyamin
25 Apr, 2023, 17:52

Mmm My bast advice for you would be to create a temporary server with a regular docker-compose file, Then remove the MariaDB service. Adjust the .env fields to point to your MariaDB server.

Then run the migrate command

After that you'll be able to change all the images version to 1.3.1.

It's a tricky situation, And it may don't go that easy in the first-try.

ORIZON
25 Apr, 2023, 18:13

@Binyamin , How can I check the Upgrade was successful?

Binyamin
25 Apr, 2023, 18:14

I'm not aware of direct way to achieve this Go over most comman tasks and check that they work.

ORIZON
25 Apr, 2023, 18:17

Got It Thanks

ORIZON
25 Apr, 2023, 18:18

What If I migrate Locally on my PC and Use MysqlDump to copy data from local to Server? Then It should work right

ORIZON
25 Apr, 2023, 18:23

@Binyamin can you check the question above?

Binyamin
25 Apr, 2023, 18:27

Yes, but you can lose any data inserted in the meantime

ORIZON
25 Apr, 2023, 18:30

Got it<:appwritepeepo:902865250427215882>

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more