2 Ways to Restrict Access to Your Appwrite Console

Eldad A. Fux
Appwrite
Published in
2 min readOct 1, 2019

Starting from version 0.2.0 you can restrict the way users can interact with your Appwrite server dashboards.

This feature is very useful for Appwrite developers deploying the setup to a production environment and need to avoid random users from starting to abuse the Appwrite compute resources.

With the new feature, you have 2 available options that leave you with the choice of how you would like to restrict access for users trying to access your production backend server.

1. Specific Email Addresses

This option is very useful for small teams or sole developers. To enable it, pass the _APP_CONSOLE_WHITELIST_EMAILS environment variable to Appwrite docker image with a list of allowed email addresses separated by a comma.

2. Specific IP Addresses

This last option available allows you to restrict access to Appwrite console for users sharing the same set of IP addresses. This option is very useful for team working with a VPN service or a company IP.

To enable activate this option, pass the _APP_CONSOLE_WHITELIST_IPS environment variable to Appwrite docker image with a list of allowed IP addresses separated by a comma.

appwrite:
image: appwrite/appwrite
restart: unless-stopped
volumes:
- .:/usr/share/nginx/html
- ./docker/nginx.conf:/etc/nginx/nginx.conf:rw
- ./storage:/storage:rw
ports:
- "80:80"
- "443:443"
depends_on:
- mariadb
- redis
- smtp
- clamav
- influxdb
- telegraf
environment:
- _APP_ENV=development
- _APP_OPENSSL_KEY_V1=your-secret-key
- _APP_REDIS_HOST=redis
- _APP_REDIS_PORT=6379
- _APP_DB_HOST=mariadb
- _APP_DB_PORT=3306
- _APP_DB_SCHEMA=appwrite
- _APP_DB_USER=root
- _APP_DB_PASS=password
- _APP_INFLUXDB_HOST=influxdb
- _APP_INFLUXDB_PORT=8086
- _APP_STATSD_HOST=telegraf
- _APP_STATSD_PORT=8125
- _APP_CONSOLE_WHITELIST_EMAILS=user1@test.com,user2@test.com
- _APP_CONSOLE_WHITELIST_IPS=192.1.1.100,192.1.1.101

Join Our Community

This new features release is a product of the great feedback and help we received from our community members on both Github and Gitter.

Appwrite’s best feature is the fact that it is 100% open source. Join us on our Gitter channel or Github repo and help us improve and add more important features that can make life easier for developers everywhere.

--

--

Eldad A. Fux
Appwrite

Entrepreneur, Software Architect, open source enthusiastic and the creator of appwrite.io. You can follow me on twitter: https://twitter.com/eldadfux