HAOS: How do I disable access to 8123 after I've set up nginx-proxy-manager?

[unixorn (Joe Block)]

I am setting up a new HAOS vm. I’ve gotten nginx-proxy-manager installed and working so I can access the haos box via SSL.

I want to disable access to port 8123 now from anything other than the nginx-proxy-manager addon. Now that I have SSL working, I only want the webui accessible by https

This was easy to do on the instance I have running in docker via the docker-compose.yaml file, but I can’t find how to do it with a full HAOS vm

Please don’t respond saying it’s ok because it’s just the local lan able to access it, or that I should just rely on the username and password to keep things secure. Nothing that isn’t running on the HAOS vm has a legitimate reason to access 8123 directly.

[fleskefjes]

@unixorn

or that I should just rely on the username and password to keep things secure

You shouldn’t - use MFA also.

[WallyR (Wally)]

You can maybe use the auth providers to do it.

Authentication providers

[aceindy]

@unixorn

I want to disable access to port 8123 now from anything other than the nginx-proxy-manager addon.

You could probably add some IP filtering or trusted networks