aboutsummaryrefslogtreecommitdiffstats
path: root/docs/running/index.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/running/index.md')
-rw-r--r--docs/running/index.md18
1 files changed, 2 insertions, 16 deletions
diff --git a/docs/running/index.md b/docs/running/index.md
index e552826dd..d618a241a 100644
--- a/docs/running/index.md
+++ b/docs/running/index.md
@@ -26,19 +26,5 @@ everything running smoothly. </p>
By default the administration pages for FixMyStreet can be found on your
installation at `/admin`.
-When you first deploy your installation of FixMyStreet, this is just a public
-directory. Obviously, for a
-<a href="{{ "/glossary/#production" | relative_url }}" class="glossary__link">production</a>
-server you should **restrict access to
-authorised users only**. For example, if you're running the Apache webserver,
-you can use `htaccess` to do this.
-
-<div class="attention-box warning">
- <p><strong>You <em>must</em> restrict access to admin</strong>
- <br>
- Never put your FixMyStreet site live until you have protected
- your admin pages.
- </p>
-</div>
-
-If you can configure your webserver to only allow access to the admin URLs over https, then you should do that, and deny access any other way. It's also a good idea to IP-restrict access to admin URLs if you know where your authorised users will be accessing them from.
+Users that have the right to access the administration pages should also
+see an Admin-link in the navigation bar on the front page.