starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-25 09:25:55 +03:00

[GH-ISSUE #4705] Access Lists on custom location paths #2989

New issue

Open

opened 2026-02-26 07:37:30 +03:00 by kerem · 6 comments

kerem commented

2026-02-26 07:37:30 +03:00

Owner

Originally created by @Bahama03 on GitHub (Aug 11, 2025).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4705

Hello,

While implementing Proxy Manager and migrating from Apache Reversed Proxy (which are all configuration files built and referred to in sites files) I came across the following configuration I use and miss in Nginx Proxy Manager;

Most of the websites are public, while others have the need to use basic HTTP Auth or an access list. This is already possible on a domain and works like a charm.
Now there are some websites which are public, but some subdirectories or subfiles on a website should be protected by auth or acl. Simple example: Wordpress websites should be public, but the wp-admin and/or wp-login.php sub url should be restricted by IP. In Apache I named a separate location and defined the allowed IP ACL.
In proxy manager this is not yet possible, since I can't define a proxy host (e.g. example.com/wp-admin), I can only define domain names (e.g. domain.com (without something after the /)). I can define custom locations for various paths but it is not possible to define a ACL for the specific path.
I am not a programmer, but I would very much like to have the option to be able to select a ACL list on a custom location (subdirectory).

Does anyone have any input?
Thanks

Regards,
Thomas

Originally created by @Bahama03 on GitHub (Aug 11, 2025). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4705 Hello, While implementing Proxy Manager and migrating from Apache Reversed Proxy (which are all configuration files built and referred to in sites files) I came across the following configuration I use and miss in Nginx Proxy Manager; Most of the websites are public, while others have the need to use basic HTTP Auth or an access list. This is already possible on a domain and works like a charm. Now there are some websites which are public, but some subdirectories or subfiles on a website should be protected by auth or acl. Simple example: Wordpress websites should be public, but the wp-admin and/or wp-login.php sub url should be restricted by IP. In Apache I named a separate location and defined the allowed IP ACL. In proxy manager this is not yet possible, since I can't define a proxy host (e.g. example.com/wp-admin), I can only define domain names (e.g. domain.com (without something after the /)). I can define custom locations for various paths but it is not possible to define a ACL for the specific path. I am not a programmer, but I would very much like to have the option to be able to select a ACL list on a custom location (subdirectory). Does anyone have any input? Thanks Regards, Thomas

kerem added the

enhancement

label

2026-02-26 07:37:30 +03:00

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@aerickt commented on GitHub (Aug 17, 2025):

I currently add a custom location and specify whatever access control I need. Here's an example:

However, I don't like this approach. I would much prefer the ability to use access lists on subdirectories. as @Bahama03 describes.

@aerickt commented on GitHub (Aug 17, 2025): I currently add a custom location and specify whatever access control I need. Here's an example: <img width="609" height="817" alt="Image" src="https://github.com/user-attachments/assets/69255177-eef7-40fa-9f32-5c976ed74bd7" /> However, I don't like this approach. I would much prefer the ability to use access lists on subdirectories. as @Bahama03 describes.

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@fvultee commented on GitHub (Aug 19, 2025):

I currently add a custom location and specify whatever access control I need. Here's an example:

However, I don't like this approach. I would much prefer the ability to use access lists on subdirectories. as @Bahama03 describes.

How are you seeing the window at the bottom of the custom locations tab where you can enter allow/deny rules? I'm on the most current version of NPM and I don't have that field?

@fvultee commented on GitHub (Aug 19, 2025): > I currently add a custom location and specify whatever access control I need. Here's an example: > <img alt="Image" width="609" height="817" src="https://private-user-images.githubusercontent.com/52895314/478815192-69255177-eef7-40fa-9f32-5c976ed74bd7.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.81JPeiGCf41V5TxusGdDxop4yRjRsfToIuGyUejtU_A"> > > However, I don't like this approach. I would much prefer the ability to use access lists on subdirectories. as [@Bahama03](https://github.com/Bahama03) describes. How are you seeing the window at the bottom of the custom locations tab where you can enter allow/deny rules? I'm on the most current version of NPM and I don't have that field? <img width="636" height="731" alt="Image" src="https://github.com/user-attachments/assets/12b48d1a-e520-45f5-a5fd-1f609dd46817" />

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@aerickt commented on GitHub (Aug 20, 2025):

@fvultee Press the gear icon.

@aerickt commented on GitHub (Aug 20, 2025): @fvultee Press the gear icon.

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@fvultee commented on GitHub (Aug 20, 2025):

@fvultee Press the gear icon.

Wow, I must have been tired, it's literally right in front of me...

@fvultee commented on GitHub (Aug 20, 2025): > [@fvultee](https://github.com/fvultee) Press the gear icon. Wow, I must have been tired, it's literally right in front of me...

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@BenoitSafari commented on GitHub (Nov 10, 2025):

@fvultee Press the gear icon.

Wow, I must have been tired, it's literally right in front of me...

I had to do some research and came across this issue to see this icon as well. You’re not alone.

However, being able to use the access list from there would be a great addition.

@BenoitSafari commented on GitHub (Nov 10, 2025): > > [@fvultee](https://github.com/fvultee) Press the gear icon. > > Wow, I must have been tired, it's literally right in front of me... I had to do some research and came across this issue to see this icon as well. You’re not alone. However, being able to use the access list from there would be a great addition.

kerem commented

2026-02-26 07:37:31 +03:00

Author

Owner

@fvultee commented on GitHub (Nov 10, 2025):

@fvultee Press the gear icon.

Wow, I must have been tired, it's literally right in front of me...

I had to do some research and came across this issue to see this icon as well. You’re not alone.

However, being able to use the access list from there would be a great addition.

Well at least we can put the details of an ACL under the icon and get the same effect, but you're right it would nice to just be able to select a predefined ACL.

@fvultee commented on GitHub (Nov 10, 2025): > > > [@fvultee](https://github.com/fvultee) Press the gear icon. > > > > > > Wow, I must have been tired, it's literally right in front of me... > > I had to do some research and came across this issue to see this icon as well. You’re not alone. > > However, being able to use the access list from there would be a great addition. Well at least we can put the details of an ACL under the icon and get the same effect, but you're right it would nice to just be able to select a predefined ACL.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#2989

No description provided.

Rows
Columns