Nginx+Apache Hybrid
- saviorhost
- Posts: 58
- Joined: Sun 11. Jan 2026, 13:51
- Location: Turkiye
- Contact:
Re: Nginx+Apache Hybrid
Re: Nginx+Apache Hybrid
Regarding ModSecurity, does Fail2Ban do the same thing? I’m referring to WAF functionality, it would be a great addition to the KeyHelp panel.Alexander wrote: ↑Fri 28. Aug 2026, 09:35You can restic admin access to specific ip (ranges): "Configuration -> Login & Session -> Access restriction to administrator accounts"I’m not sure if I’m posting in the right place, but how can we get the admin panel to run on a different port? This would allow us to set up firewall rules so it can only be accessed from a specific external or internal IP (for those using a VPN).
Changing the ports for the whole server can be achieved with "Configuration -> Web Server -> HTTP port / HTTPS port"
Hi Alexander, what I mean is having the login interface run on a separate port, since it is visible to any attacker, even though I’ve restricted access to specific IPs and enabled two-factor authentication, I’m still seeing failed login attempts.
For example: srv.mycompany.com:2222.
I tried using an .htaccess configuration like this: <Directory /home/keyhelp/www/keyhelp/> Require ip 82.xxx.xxx.xxx Require ip 195.xxx.xxx.xxx </Directory>, but that configuration was wiped out when I upgraded to the new version of KeyHelp.
You can install and configure ModSecurity on your KeyHelp server and use that for example, or rely on Fail2Ban, or use Cloudflare, ...Also, regarding a WAF—what are the options?
I’m new to this forum and don’t want to offend anyone, but given how attacks are evolving (with hackers using AI), it would be good to have such security measures in place.