Proper way to block all univention from internet

UCS - Univention Corporate Server
#1

Hello,

Is there a proper way of bloking all univention configuration sites from the internet and leave only owncloud and let’s encrypt?

I have tried a few settings that I found here and in the Apache documentation but only got it to work with the settings below, however I don’t know if that covers everything:

I have edited /etc/apache2/conf-available/ucs.conf

 <Directory /var/www/>
    Options +Indexes +FollowSymLinks +MultiViews
    AllowOverride AuthConfig Limit FileInfo
    Order deny,allow
    Allow from 192.168.0.0/24 #Allow only local subnet.
    deny from all
 </Directory>

Will this block all the management console and leave accessible only lets encrypt and owncloud (server has only these 2 additional services insalled)

Thank you!

#2

Check this, maybe can help: https://deepdoc.at/dokuwiki/doku.php?id=prebuilt_systems:ucs:umc_und_portal_vor_externen_zugriff_schuetzen

Mastodon