Skip to content

Conversation

@Artillio
Copy link

I added phpmyadmin to manage the database more easily

I added phpmyadmin to manage the database more easily
@luke-
Copy link
Contributor

luke- commented Jan 13, 2025

Thanks for the contribution.

I'm still a bit unsure whether we should add this. It's important that the default Docker Compose setup is as secure as possible out of the box.

@ArchBlood
Copy link

Thanks for the contribution.

I'm still a bit unsure whether we should add this. It's important that the default Docker Compose setup is as secure as possible out of the box.

Could use Caddy here for this and remove the mapping for public ports? Although this would require more thinking on the intended implementation.

Example

Limit Access

:8081 {
    reverse_proxy localhost:8081
    @allowed {
        remote_ip 192.168.1.0/24  # Replace with allowed IP ranges
    }
    respond @notAllowed "Access Denied" 403
}

Authorization

:8081 {
    reverse_proxy localhost:8081
    basicauth / {
        admin JDJhJDEwJG...hashed_password_here
    }
}

HTTPS

phpmyadmin.yourdomain.com {
    reverse_proxy localhost:8081
    tls email@example.com
}

Disable External Ports

phpmyadmin:
    image: phpmyadmin/phpmyadmin:latest
    restart: always
    ports:
      # - "8081:80" # Remove this line

But again, the implementation would really need more thinking of how it is wanted to be used if at all.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants