diff options
| author | Marius Halden <marius.h@lden.org> | 2020-09-29 14:23:52 +0200 |
|---|---|---|
| committer | Marius Halden <marius.h@lden.org> | 2020-09-29 14:23:52 +0200 |
| commit | a27ce1524d801d2742a2bdb6ec1da45126d64353 (patch) | |
| tree | 64123c4e17dc1776aa0a7cd65ee01d49d3e7d978 /docs/running/index.md | |
| parent | 377bd96aab7cad3434185c30eb908c9da447fe40 (diff) | |
| parent | 2773c60226b9370fe8ee00f7b205b571bb87c3b5 (diff) | |
Merge tag 'v3.0.1' into fiksgatami-dev
Diffstat (limited to 'docs/running/index.md')
| -rw-r--r-- | docs/running/index.md | 18 |
1 files changed, 2 insertions, 16 deletions
diff --git a/docs/running/index.md b/docs/running/index.md index e552826dd..d618a241a 100644 --- a/docs/running/index.md +++ b/docs/running/index.md @@ -26,19 +26,5 @@ everything running smoothly. </p> By default the administration pages for FixMyStreet can be found on your installation at `/admin`. -When you first deploy your installation of FixMyStreet, this is just a public -directory. Obviously, for a -<a href="{{ "/glossary/#production" | relative_url }}" class="glossary__link">production</a> -server you should **restrict access to -authorised users only**. For example, if you're running the Apache webserver, -you can use `htaccess` to do this. - -<div class="attention-box warning"> - <p><strong>You <em>must</em> restrict access to admin</strong> - <br> - Never put your FixMyStreet site live until you have protected - your admin pages. - </p> -</div> - -If you can configure your webserver to only allow access to the admin URLs over https, then you should do that, and deny access any other way. It's also a good idea to IP-restrict access to admin URLs if you know where your authorised users will be accessing them from. +Users that have the right to access the administration pages should also +see an Admin-link in the navigation bar on the front page. |