Secure your Environment

You can chose to secure your Environment in order to avoid exposing staging or dev Environments publicly.

To do this, you will have to edit the env.yaml file's security property, as demonstrated below.

## env.yaml -> security
security:
  access:
    allowedIps:
      - '192.168.0.1/24'
      - '185.181.102.37/32'

These settings are applied at an Environment level, to all Components inside that Environment.

If you need to bypass this rule and expose certain endpoints publicly, you can do that from the hosts property of each Component (Application / Service). This is useful if your applications have webhooks which need to be called by external systems (example below):

## env.yaml -> components.SERVICE_NAME[*].hosts
hosts:
  - hostname: backend
    path: /
    servicePort: 8080
    public: true