Reverse Proxy "woking" but Fusionauth is still available with port

[marvin]

Hey there,

I want to create a reverse proxy with apache2 virtual host. If I enter the credentials I get a 403 access denied.
I force the user to got https when calling auth.mydomain.de. My problem is that fusion auth is still available on mydomain.de:9011 with http which is a security risk.
Where do I tell fusionauth to listen only to localhost?
And where do I tell fuisonauth to accept another domain?

Greetings

[dan]

There's no way you can configure this in FusionAuth.

You could do this with a firewall.

AWS EC2 has security groups (and I'm sure other cloud providers have similar constructs).

If you are deploying on a VPS, you could block port 9011 (and the other FusionAuth ports, see the configuration reference for details) with iptables.

Here's a result from a search: https://www.cyberciti.biz/faq/iptables-block-port/

[hopper.jerry]

Use docker?