# How to close access to the authorization form?
**URL:** https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732
**Category:** Pydio Cells
**Tags:** authentication
**Created:** [October 14, 2022, 4:19am UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732 "2022-10-14T04:19:26Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Isaenkov\_Pavel](https://forum.pydio.com/u/Isaenkov_Pavel)
#### Post date: [October 14, 2022, 4:19am UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732/1 "2022-10-14T04:19:26Z")
Hello!
It is necessary to close access to the authorization form for all ip addreses, except for certain ones.
---
### Author:  [@GwynethLlewelyn](https://forum.pydio.com/u/GwynethLlewelyn)
#### Post date: [October 14, 2022, 5:27pm UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732/2 "2022-10-14T17:27:38Z")
But _only_ the authorisation form, right? External users will still be able to download shared links (which were set to public download)?
That’s an interesting use-case!
As far as I know, you cannot do that easily from within Cells itself (unless you hack the code, there is) — I’m assuming you’re using the Community Edition. But if you are running Cells behind a reverse proxy, it _might_ be possible to do something!
For instance, a quick look at the HTML for the authorisation form shows that it calls `frontend/bootconf` (among others), allegedly something internally routed to produce the authorisation form (there are more such calls, this is not the only one). What you could do is to set a rule on the reverse proxy to deny all access to such internal links, except for those few exceptions.
Thus, even if someone tries to access the Pydio backoffice page, they will _not_ see the authorisation form, but probably just a blank page with a background image.
Beyond that, I’m afraid that the only alternative would be to hack the templates or possibly even the code…
---
### Author:  [@Isaenkov\_Pavel](https://forum.pydio.com/u/Isaenkov_Pavel)
#### Post date: [October 15, 2022, 10:35am UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732/3 "2022-10-15T10:35:53Z")
Yes, I’m writing about the Community Edition. I need to block access to the authorization form from the internet. In nginx I use this scheme:
```auto
location /server-status {
allow 111.111.111.111;
allow 11.11.11.11;
deny all;
}
```
there is something similar in Caddy.
Is there any way to transfer these settings to Caddy?
---
### Author:  [@GwynethLlewelyn](https://forum.pydio.com/u/GwynethLlewelyn)
#### Post date: [October 15, 2022, 11:33am UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732/4 "2022-10-15T11:33:04Z")
I’m not familiar with Caddy, but the answer most likely is ‘probably yes’.
However, if you’re already using nginx, why don’t you use it instead as a [reverse proxy](https://pydio.com/en/docs/kb/deployment/running-cells-behind-nginx-reverse-proxy)? Then you can apply whatever rules you wish to nginx…
---
### Author:  [@system](https://forum.pydio.com/u/system)
#### Post date: [December 14, 2022, 11:33am UTC](https://forum.pydio.com/t/how-to-close-access-to-the-authorization-form/4732/5 "2022-12-14T11:33:51Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.