Reach the API through SSH

Keep the API on localhost. An SSH tunnel brings its port to your machine.

The API listens only on 127.0.0.1 of the server. The internet cannot reach it.

1 / 3

This is the safer default for a production server. The API stays on localhost, and the SSH tunnel encrypts the traffic.

Do it

Run this command on your machine. Keep it open.

Terminal

ssh -L 7878:127.0.0.1:7878 you@your-server

Run this command in a second terminal.

Terminal

ferry login --server http://127.0.0.1:7878

The dashboard is at http://127.0.0.1:7878 in your browser.

The other way is the dashboard on a hostname, with HTTPS.

The dashboard on a hostname

The proxy can serve the dashboard and the API on a hostname. Do this only with HTTPS.

The domain check path

The proxy answers one path with no authentication. Ferry uses it to test that a domain reaches this server.