Rainloop-webmail: admin panel security

[suyashjain]

hi,

how can i secure admin section. I am using nginx and would like to have additional web user/pass to be added to this but i am not getting the correct url for that.

[RainLoop]

http://domain.com/rainloop-path/?admin

[suyashjain]

That is my question, how can i secure it or change it. this ?admin is known to everyone.

[BentHaase]

@suyashjain I recommend this tutorial. https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

The solution is called 'htpasswd'. Make sure to install the apache2-utils packet before going through the tutorial. Also it's debatable if this really increases security.

[suyashjain]

Hi,

I would like to know if I could change the default admin URL so that others
could not guess the correct one.

Thanks
On Mar 22, 2016 12:39 PM, "ET-Bent" [email protected] wrote:

@suyashjain https://github.com/suyashjain I recommend this tutorial.
https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

The solution is called 'htpasswd'. Make sure to install the apache2-utils
packet before going through the tutorial. Also it's debatable if this
really increases security.

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
https://github.com/RainLoop/rainloop-webmail/issues/976#issuecomment-199670387

[BentHaase]

@suyashjain You could use some simple rewrite rules for this (either NGINX or Apache).

[RainLoop]

I have added a configuration parameter (54c3e07).
It will allow you to change admin url as you need.

Fix will be allowed in the next release version.

[RainLoop]

[security]
admin_panel_key = "admin"