diff --git a/front/403_internal.html b/front/403_internal.html new file mode 100644 index 00000000..cbbcc8cf --- /dev/null +++ b/front/403_internal.html @@ -0,0 +1,65 @@ + + + + + + Access Restricted - NetAlertX + + + +
+

403 Forbidden

+

+ The /server endpoint is for internal use only and cannot be accessed from external browsers or applications. +

+

+ This security measure protects the backend API. You will need to contact your system administrator in order to gain access to the API port (default: 20212), or use the application through the standard web interface. +

+
+ NetAlertX Security • Trust Level: Untrusted Origin +
+
+ + \ No newline at end of file diff --git a/install/production-filesystem/services/config/nginx/netalertx.conf.template b/install/production-filesystem/services/config/nginx/netalertx.conf.template index 0dfbeb18..abe3e9e1 100755 --- a/install/production-filesystem/services/config/nginx/netalertx.conf.template +++ b/install/production-filesystem/services/config/nginx/netalertx.conf.template @@ -117,6 +117,7 @@ http { location /server/ { # 1. Enforcement + error_page 403 /403_internal.html; if ($is_trusted != "TRUSTED") { return 403; }