Score:0

Server

NGINX - allow access to specific URL only via a subdomain

Tarlan Mammadzada

11/10/22, 5:27 PM

I have a web page, located on example.com/app.

Is there a way to deny direct access to example.com/app and allow only via app.example.com by means of NGINX?

221

1 + 1

nginx

Tero Kilkanen

11/10/22, 6:22 PM

Please share the output of `nginx -T` so that we can see your full nginx configuration and give a proper answer.

Score:1

Server

Paul

11/10/22, 5:42 PM

In your example.com server block, location ~ app { deny all; } (or similar):

server {
    server_name example.com;
    location ~ api { deny all; }

<configuration for example.com>
}

server {
    server_name api.example.com;

<configuration for api.example.com>
}

0 + 7

Tarlan Mammadzada

11/10/22, 5:45 PM

But will I access example.com/api via api.example.com?

Paul

11/10/22, 5:48 PM

As long as `api.example.com` is in a different `server` block, yes.

Tarlan Mammadzada

11/10/22, 5:56 PM

Could you please add in your answer a server block for `api.example.com` which accesses `example.com/api`?

Paul

11/10/22, 6:14 PM

The subdomain and domain are simply in different `server` blocks. They are not accessing in the same way a browser does. The access is to the directories and files on the server. By configuring separate `server` blocks for the domain and the subdomain, access to files is easier to manage.

Tarlan Mammadzada

11/10/22, 6:52 PM

In your example I have to redirect `api.example.com` to `example.com/api`, because I don't have a folder named `app` to set in the root of `server`.

Paul

11/10/22, 7:05 PM

The `location` is what is requested to `nginx` by a client. With the `deny all;` directive, `nginx` will not look for the matched `location`. As far as what is actually in the server file structure is another story, because that is not what is being evaluated in this case. Even if there is no file or directory called `api`, `nginx` will still respond to the client with 403.

Pothi Kalimuthu

11/11/22, 9:19 AM

@TarlanMammadzada Please update your question by posting your existing configuration and `curl` output of what's happening and what you are looking for. This answer gives the exact answer that you asked for in your OP. If you have a different or additional questions, post it in your OP or create a new question so that everyone knows what you are trying to achieve.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: NGINX - allow access to specific URL only via a subdomain

TH: NGINX - อนุญาตให้เข้าถึง URL เฉพาะผ่านโดเมนย่อยเท่านั้น

RO: NGINX - permite accesul la o anumită adresă URL numai printr-un subdomeniu

RU: NGINX - разрешить доступ к определенному URL только через поддомен

VI: NGINX - chỉ cho phép truy cập vào URL cụ thể thông qua tên miền phụ

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.