How to deploy private applications

[pantera-travis (Travis Blanton)]

Issues information:
I see and understand how to deploy a private database within a given environment. I’m looking for a similar method to deploy an application privately as well. Please note I don’t want the whole cluster to private just select applications. As a stretch goal it would be great if the specific applications could only be available from specific IPs with something like whitelisting public IPs if you want to restrict access to your apps from internet.

I was planning cover the above IP whitelisting by running a Nginx Proxy with IP whitelisting enabled but open to an easier way.

Thanks as always!

[rophilogene (Romaric Philogene)]

Hi @pantera-travis ,

@pantera-travis

I see and understand how to deploy a private database within a given environment. I’m looking for a similar method to deploy an application privately as well. Please note I don’t want the whole cluster to private just select applications.

Of course, you can deploy applications without exposing some of them. You simply need to:

Qovery V2:

1. Get into your application settings.
2. Click on the “port” tab
3. Uncheck the “publicly” switch box

Qovery V3:

1. Get into your application settings.
2. Click on the “port” tab
3. Uncheck the “publicly” switch box

@pantera-travis

As a stretch goal it would be great if the specific applications could only be available from specific IPs with something like whitelisting public IPs if you want to restrict access to your apps from internet.

I invite you to read this thread for IP whitelisting

How to whitelist certain IPs to the application?

Here are the instructions to set up the IP whitelisting for your app via curl Usage To use the Qovery app advanced settings API: check out our API documentation. Create an API token. Keep secured your API token - never share it with anyone. Whitelist IP addresses To whitelist only some IPs like: 1.1.1.1 42.42.42.42 11.11.11.11 You can run the following CURL command: curl -X PUT -H 'Authorization: Token <your API token>' -H 'Content-type: application/json' \ -d '{"network.…

And it’s also configurable via Qovery V3 (check the video tutorial I just made below)