# Node Red Admin behind firewall

**URL:** https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143
**Category:** General
**Tags:** security
**Created:** [12 October 2021 18:21 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143 "2021-10-12T18:21:07Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![HarryPottar](https://avatars.discourse-cdn.com/v4/letter/h/bb73d2/32.png) [@HarryPottar](https://discourse.nodered.org/u/HarryPottar)
#### Post date: [12 October 2021 18:21 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/1 "2021-10-12T18:21:08Z")

</div>

HI,  
We have node red running in a kuberntices cluster, we have Nginx running on the font end.

We want to send the admin screen behind a VPN.  
[https://host:1880/#flow](https://host:1880/#flow).

Nginx ignore the #flow, how do we route the admin screen and leave all other alone.  
TIA  
Harry

---

<div class="post-metadata">

### Author: ![hardillb](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/hardillb/32/12373_2.png) [@hardillb](https://discourse.nodered.org/u/hardillb)
#### Post date: [12 October 2021 19:56 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/2 "2021-10-12T19:56:55Z")

</div>

Anything after (and including) the `#` never leaves the browser, so nginx will never see it so can not filter on it.

What do you mean by the admin screen?

If you want to enforce a VPN connection then you should be filtering on requesting IP address.

---

<div class="post-metadata">

### Author: ![HarryPottar](https://avatars.discourse-cdn.com/v4/letter/h/bb73d2/32.png) [@HarryPottar](https://discourse.nodered.org/u/HarryPottar)
#### Post date: [12 October 2021 20:22 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/3 "2021-10-12T20:22:00Z")

</div>

The node-red screen where you manage the flows should not be accessible outside the vpn, but any of the automation flows need to be.

We short of fixed it in reverse, all http in request, we prefixed with a path. Those paths are allowed any other paths are blocked.

On the VPN we can get the the node-red flows.

Thanks  
Harry

---

<div class="post-metadata">

### Author: ![hardillb](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/hardillb/32/12373_2.png) [@hardillb](https://discourse.nodered.org/u/hardillb)
#### Post date: [13 October 2021 10:18 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/4 "2021-10-13T10:18:54Z")

</div>

OK, so the correct term is the editor, not admin screen.

You can move the path to the editor by updating the `httpAdminRoot` in the settings.js

You can also prepend a path to all the http-in nodes with the `httpNodeRoot` entry.

---

<div class="post-metadata">

### Author: ![HarryPottar](https://avatars.discourse-cdn.com/v4/letter/h/bb73d2/32.png) [@HarryPottar](https://discourse.nodered.org/u/HarryPottar)
#### Post date: [13 October 2021 13:42 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/5 "2021-10-13T13:42:38Z")

</div>

Thank you, thank you, thank you.

That made life a lot easier  
Harry

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [27 October 2021 13:43 UTC](https://discourse.nodered.org/t/node-red-admin-behind-firewall/52143/6 "2021-10-27T13:43:11Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
