Public/private access

[quintennoels]

Hi,
Could we add a section to the documentation on how to make the app as privately accessible as possible?

• Private endpoint for inbound access to the webapp + turn public access off
• Keyvault/cosmosdb only accessible through selected IPs (the outbound public ips of the webapp)
• ... Am I forgetting anything?
  Thanks!

[DCMattyG]

Hi @quintennoels, we have been working on some docs for this as it is a top ask. That said, in the deployments current form it uses a multi-container App Service which doesn't support vNET Integration (at this point in time).

I'm currently in the process (as we speak) of re-working the app to work as either a single container or native code running in an App Service and this will enable the paradigms that you've lined out above.

I'll definitely include the "how to make everything private" docs shortly after the next upcoming release and that should help get everyone where they need to be 👍

[Dylan-Prins]

Hi @DCMattyG,

Is there any progress?

[Dylan-Prins]

Still nothing?!

[JBirSP]

Still nothing?!

There doesn't seem to be anything in the docs, but I was successful in deploying with private endpoints and public access disabled using the steps described here: #244 (comment)

[DCMattyG]

@JBirSP thank you so much for linking that here and @Dylan-Prins my apologies for the continued delay on this item. There's been quite a lot going on with new features and some bugs fixes and I've unfortunately fallen behind on updating the docs. I did share a high-level guide in the above mentioned link and if you need some more personalized guidance until I'm able to complete the doc updates, please feel free to reach out to me via email at [email protected] and I can provide you some more detailed screenshots and steps for now, which will eventually make it into a nice-formatted docs page.

Sorry again, just trying to make sure I'm properly prioritizing all of the amazing requests that have come in from the community 😄

[Dylan-Prins]

No problem! Can imagine you are busy.

Thanks for the update!