HTTP - IP Whitelisting
Added in Version 4.3.0, you can activate a feature to block the entire website except for specific IP addresses.
This feature was developed and currently used on the Thomas Graham project.
Using the feature
There is an ENV Variable JUMP_HTTP_RESTRICT_TO_IP_ADDRESS_ENABLED=false or the feature can be enabled by going to the Backend Settings > System > Ip Restrictions and ticking the "Enabled switch"
There is a list for managing the list of IP addresses once the switch has been enabled.
danger
Remember to set your own IP address is the list before Saving!
Accessing the website if you've not been whitelisted
If you're locked out, not working in the JUMP office (our office static IP should always be added to the list) and need to get into the backend then follow the steps:
- Connect directly to the database
- Look in the System settings table
system_settings - Look for the row with
itemequal tojump_backend_ip_restriction_settings - Expand its JSON field called
value - Inside you'll see similar to
"ip_addresses":[{"ip_address":"51.XX.XX.XXX"},{"ip_address":"51.XX.XX.XXX"}] - Simply add an additional key of
id_addresswith a value of your actual IP address to theip_addressesarray - Save the row
- You'll likely need to clear the cache, as October caches system settings.
- To do that, SSH onto the Lightsail, SSH onto the App Docker container and run
php artisan cache:clear - You should now have access to the backend of the website