Cockpit: How to setup cockpit to work only from its domain?
Hello,
I will use Cockpit API on frontend with visible API key (not full access) but i dont want developers to have ability to request my data from anywhere.
6feferonka9
All 2 comments
On root directory there's an index.php.
You can find:
header("Access-Control-Allow-Origin: *");
Remove the star and put your own domain there.
header("Access-Control-Allow-Origin: example.com");
blindly
on 30 Mar 2018
🎉2
👍2
@6feferonka9 it's possible to configure cors by editing the file config/config.yaml or in Settings > System Settings through the UI:
# Cockpit settings
cors:
allowedOrigins: https://example.com
gyopiazza
on 16 Nov 2020
Was this page helpful?
0 / 5 - 0 ratings
Related issues
crealx
路
6Comments
victormoretti
路
5Comments
solucionti
路
4Comments
Hughp135
路
4Comments
TechnicallyJoe
路
6Comments
Most helpful comment
On root directory there's an index.php.
You can find:
header("Access-Control-Allow-Origin: *");Remove the star and put your own domain there.
header("Access-Control-Allow-Origin: example.com");