Limit Access for /admin to specified IP addresses

qiju

I’d like to limit the access to the admin panel /admin to only some specified IP addresses and deny the access from global internet.

I think the best is an allow/deny rule in nginx for the /admin path. But I’m not sure what’s the best way to implement that within mailcow to keep updates working without problems?

I’ve looked into the docs but didn’t find anything.
I would appreciate any advice on how to implement this.

esackbauer

Let me search that for you:
https://community.mailcow.email/d/429-restrict-access-to-admin-interface

qiju

esackbauer

Thank you very much for using the search function so quickly. The post does indeed describe the same issue. Today, six years later, I was hoping for a slightly more refined solution.

Perhaps someone who has successfully implemented this on their own system can offer some guidance. I would appreciate that. Thanks.

esackbauer

qiju I was hoping for a slightly more refined solution

That would be a reverse proxy in front of mailcow. I use Sophos Firewall, which has the benefit of additional safety checks like a proper web application firewall does.