Hi, is there a way to mount the dashboard endpoint to a separate port with a seperate domain and gateway settings? except the obvious way of creating a separate deployment of our BE service for that purpose?

hey @idanto not possible other than what you suggested!

thanks

well, we can't really do that, cause all we do is piggy back off of your api setup.

why not? you can duplicate the settings and add ability to mount it to a seperate port

if you add another domain pointing to your api layer, you can enforce that the host header in the request is that domain

I don't see shouldAllowAccess in the link I do see getDashboardBundleLocation which looks like giving me the option to change the location of the dashboard if I understand right

the point of doing that is to not mount the dashboard to the API because that increase the attack surface. instead I would like to mount it to a separate port in the service and expose it using a different domain that I can protect using VPN or other layers of security

yup, i know. So you can make a separate domain that points to your API layer, and then in the shouldAllowAccess, get the host header of the request and check based on that

ok, thanks

sg!