How to customize the backend domain in AnqiCMS and enhance backend security?

As a senior security CMS website operations personnel, I am well aware of the importance of the security of the content management system backend to the website operations.An secure backend not only ensures your data assets, but also ensures the stable operation of the website and user trust.Safe CMS is well-versed in this field and introduced the feature of custom backend domain names in its v2.1.1 version. This feature is a key aspect in enhancing backend security.

The importance of customizing the background domain of AnqiCMS

The default backend access path of AnQi CMS is usually added to your website domain./system/.Although this takes into account convenience, there are certain hidden dangers in terms of security.All safe CMS users should know this path by default, which provides convenience for potential automated scanning and attacks.

Firstly, the backend's confidentiality has been enhanced. The backend has been separated from the frontend and uses an independent, non-public domain name (for exampleadmin.yourdomain.comIt can greatly increase the difficulty of discovering the backdoor login entry by malicious programs or automated scripts.This is like adding an unknown secret door to your treasure chest, making it take more time and effort for attackers to find the entrance.

Next, better isolation and protection are provided.An independent backend domain means that you can configure independent network security policies for the backend, such as setting specific firewall rules, DDoS protection, or Web Application Firewall (WAF).These security measures can directly affect the backend domain without impacting the front-end access of your website, thereby achieving more refined security management.

Again, improved the professionalism of the background management.An independent backend domain can be used for internal management or access by specific teams, distinguishing it from the brand image displayed to the public, which helps establish clearer management processes and permission systems.

Custom backend domain name implementation in the Anqi CMS

Implement the custom domain name of the AnQi CMS backend, you need to operate at three levels: domain name resolution, Web server configuration, and AnQi CMS backend settings.

Before starting the configuration, please ensure that you have a dedicated subdomain available for backend access (for example,admin.yourdomain.com），and the DNS records of the domain have been correctly pointed to your server IP address.At the same time, it is strongly recommended that you apply for and configure an SSL certificate for this new domain name to enable HTTPS encrypted access, which is crucial for protecting sensitive backend data.

Firstly, you need to configure reverse proxy for the new backend domain on a web server (such as Nginx or Apache). For example, with Nginx, you need to create a newserverAdd or modify an existing configuration, bind a new backend domain to itserver.location /Instructions, reverse proxy all requests to the backend domain to the port listened by the AnQi CMS application (default is8001）。If your security CMS is deployed in a Docker container, it is common and recommended to use the web server as a reverse proxy.Ensure that the Nginx or Apache configuration is correct and then save and reload or restart your web server.

After configuring the web server, proceed to the backend of the security CMS for settings. You need to temporarily access through the original path (for example,yourdomain.com/system/Login to the CMS backend.Login successfully and navigate to the "Global Function Settings" option under the "Background Settings" menu.In this page, you will find a field named “Background Domain Address”.https://admin.yourdomain.com）。Complete the fill-in and save your settings.

Finally, it is the verification and testing phase.Please try entering the new backend domain you have set in your browser to access the AnQi CMS backend.Confirm that you can log in and use all features./system/Path, ideally, it should no longer be accessible to the backend, or redirected to a new backend domain by your web server configuration.

Further strengthen the security of the CMS backend

Customize the backend domain is the first step to enhance the security of the CMS backend. To build a stronger defense line, we can also take the following measures:

Ensure HTTPS usage is strictly followed.SSL certificates can encrypt data transmission, prevent data from being intercepted or tampered with during transmission, and also display a secure lock icon in the browser, enhancing user trust in the website.

Implement IP whitelist restrictions.On your web server (Nginx/Apache) configuration or server firewall, only specific, trusted IP addresses are allowed to access your backend domain.This means that only devices within these specified IP address ranges can attempt to log in to your CMS backend, greatly reducing the risk of attacks from unknown sources.

Enable rate limiting for the login page.Configure your web server to limit access rates to the background login URL, for example, limiting the number of login attempts within a short period of time.This can effectively prevent attempts to crack passwords.

Regularly update the security CMS version and all dependent software.The Auto CMS will continue to release updates and fix known security vulnerabilities.Timely updates can ensure that your system is always in the latest state of security.At the same time, the underlying software such as the operating system, database, and web server should also be kept up to date.

Deploy a strong backend management password and two-factor authentication (if the system supports it).Use complex and hard-to-guess passwords is fundamental.If the two-step verification feature is provided by AnQi CMS, please enable it. It can provide an additional layer of protection for your account in case of password leakage.

Concluding remarks

In the wave of digitalization, website security is an indispensable part of enterprise operation.Through the custom backend domain function provided by Anqi CMS, combined with detailed web server configuration and continuous security maintenance habits, you can significantly improve the security of the website backend and safeguard your content operations.

Frequently Asked Questions

问：I set a custom backend domain, why is the old/system/path still accessible to the backend?

答：This is usually because your web server (such as Nginx or Apache) does not have support for old/system/The path should be processed specially. To achieve stronger security, you should modify the Web server configuration to redirect all requests to the old/system/The request for the path is redirected to your new backend domain, or these requests are blocked directly. This ensures that all backend access is done through a secure custom domain.

问：我是否可以为我的自定义后台域名使用HTTP，而不是HTTPS？

答：Technically, you can use HTTP, but it is strongly recommended that you use HTTPS.HTTP connections transmit all data in plain text, including your login credentials, which makes them highly susceptible to interception and abuse.Using HTTPS can encrypt this sensitive information, effectively prevent man-in-the-middle attacks and data interception, thus providing necessary security for your background management.

问：更改后台域名是否会影响我的网站前端的SEO表现？

答：Will not.Changing the backend management domain of Safe CMS will not affect the SEO performance of your website's frontend.The search engine crawls and indexes the public visible content of your website, not the backend management interface.As long as the structure and access path of your frontend website content remain unchanged, SEO will not be affected.