Ghost Admin Security: Is there any way to redirect Admin-URL (Redirection Alternative)

Developer help Installation
4

You can’t change the /ghost/ part but it’s possible to “hide” the admin using config.

{
    "url": "https://mysite.com/",
    "adminUrl": "https://secret.mysite.com/",
    "admin": {
        "redirects": false
    }
}

Your admin then lives at https://secret.mysite.com/ghost/ and https://mysite.com/ghost/ will 404 rather than redirect. However, if you are using the Content API via JS then your admin url will still be exposed because it’s where Ghost’s API lives.

None of this really changes the security of your site, Ghost is already secure, all it would be doing is obscuring things slightly. As @vikaspotluri123 said, if you want extra security you can place additional authentication mechanisms on top of your admin endpoints but it’s worth remembering that will also limit access for integrations which will typically not be built to handle any additional auth.

5 Likes