myantsle.local login page exposed to internet

I just noticed that when an unsecure web server (http://mydomain.com) is configured in nginx to a registered domain (ie. mydomain.com), and you try to make a secure connection to the same domain (httpS://mydomain.com), it redirects to the myantsle.local login page is displayed.

Is there a way to block that? One should be able to not have the login page exposed to a brute force attack on the internet.

-akak

Hi @akak01000101

Yes, this is the default behavior of edgeLinux and nginx to redirect HTTPS to port 3000 on the antsle to access antMan.  Hence, if you go to https://your-antsle-ip, it will be re-directed to the antMan Console.

However, if you've got virtual hosts file configured to go to your specified antlet, the HTTPS should be re-directed to your antlet.

You can also contact us at [email protected] so we can look into your specific setup.