As an experienced website operation expert, I know the importance of website security in daily operation.In such an efficient and secure content management system as AnQiCMS, we can further strengthen the website's defenses through some clever settings.Today, let's delve into how to set up a separate admin domain for the AnQiCMS website backend. This feature not only effectively enhances security but also makes your website management more professional.

The charm of an independent backend domain name: more than security, it's professionalism

Imagine that your website's frontend domain name iswww.yourdomain.comand the backend management interface is also accessed throughwww.yourdomain.com/system/Such path access. This default setting is convenient, but it also allows potential attackers to easily guess your management entry. And having a separate backend domain, such asadmin.yourdomain.comormanage.yourdomain.comIt's like putting a unique signboard on your management interface, which significantly improves the security of the website.

The benefits brought by this feature are multifaceted:

First of all, it provides aincrease in security levels.The independent backend entry is no longer closely associated with the frontend business, which makes it harder for attackers to directly lock the backend entry by scanning frontend vulnerabilities.This 'hiding' is not absolutely safe, but undoubtedly increases the difficulty and cost of the attack.

Secondly, an independent domain allows you to configure the background management interfaceA stricter firewall and security policy.You can set independent Web Application Firewall (WAF) rules, IP whitelists, even geographical access restrictions for this specific domain name, ensuring that only authorized and secure requests reach your management panel without affecting the normal user experience on the front-end.

Furthermore, if needed, you can even configure an independent background domainEnglish higher level SSL certificate，or use different SSL certificate providers to further strengthen the encryption security of data transmission. This provides additional security for your sensitive management operations.

Finally, an independent backend domain helps to achieveRisk isolationEven if the front-end website is unfortunately attacked by some minor attacks, due to the complete independence of the back-end entry, the risk of being affected will be greatly reduced, ensuring the stability and security of the management channel.

English preparation: Domain resolution and server configuration

Before setting up in the AnQi CMS backend, there are several key preparations you need to complete first. This is like building a sturdy fortress, the foundation must be laid first.

The first step isPrepare an independent domain name or subdomain. For example, if your main site domain isyourdomain.com, you can register a new domain name, or more commonly, use a subdomain, such asadmin.yourdomain.com.

Second step, you need to point this new domain or subdomain.to your server's IP address..This is usually done by adding an A record (if pointing to an IP address) or a CNAME record (if pointing to another domain) at your domain registrar or DNS service provider.Ensure that the parsing is effective, which may take a few minutes to a few hours.

Third step, which is also a very critical step, you need toConfigure a web server (such as Nginx or Apache) as a reverse proxy on the server.The Auto CMS typically runs on a specific port (default is 8001), and the role of the web server is to listen to your independent backend domain and forward all requests to the port where the Auto CMS is running.

For example, using Nginx, you need to create a new block in the Nginx configuration file for your independent background domainserverand configureproxy_passInstructions to redirect traffic to the internal address and port of AnQiCMS (e.g.,http://127.0.0.1:8001. Make sure that,HostThe header information is correctly transmitted, which is crucial for AnQiCMS to identify the source of the request.If you are not familiar with these configurations, you can refer to the detailed description of Nginx or Apache reverse proxy in the Anqi CMS documentation, or seek help from the server administrator.After completing the configuration, don't forget to restart the Nginx or Apache service to make the configuration take effect.

AnQiCMS backend settings: The way to configure exclusive entry

When your domain name resolution and server reverse proxy are properly configured, and you can accesshttps://admin.yourdomain.comWhen you access the login interface of Anqi CMS by visiting [or the domain name you choose], you can enter the Anqi CMS backend to make the final settings.

Log in to your safe CMS backend, navigate to the left-hand menu's "Backend settings" area. Here, you will see an option named "[en] Global function settings", click it to enter the global configuration page.

In this page, scroll to find one named “Background domain addressThe input box. It is here that we will specify your independent backend domain. Please ensure that you fill in the domain you have prepared for the backend completely and accurately, for examplehttps://admin.yourdomain.comIt is strongly recommended to useHTTPSProtocol, to ensure the encrypted transmission of data.

Click the " at the bottom of the page after filling out.SavePress the button to make your configuration take effect.System may prompt you to refresh the page or log in again.After completing these operations, the new backend domain of Safe CMS will be officially enabled.https://admin.yourdomain.comProceed with the existing,/system/The path will no longer be used to manage entries, thus enhancing security.

Please remember that this setting takes effect only if the domain name resolution and server reverse proxy configuration mentioned earlier are correct.If any of these prerequisite steps are missed or incorrect, you will not be able to access the backend through the new domain.

Concluding remarks

Setting an independent backend domain for AnQin CMS is a small but significant strategy in the safe operation of website.It not only makes your management entry more concealed, but also provides a foundation for implementing more refined security protection.As website operators, we should always prioritize security and build strong barriers for the website and user data through continuous optimization of configurations and strategies.This feature provided by AnQi CMS is a powerful tool for us to achieve this goal.

Common Questions (FAQ)

  1. Q: After setting a separate background domain name,yourdomain.com/system/can the path still be accessed?A: Cannot. Once you have set and saved an independent backend domain in the Anqi CMS backend and it takes effect,yourdomain.com/system/The path will no longer be used as the entry for backend management. All backend access must be through the new domain name you set (for exampleadmin.yourdomain.com）Perform. This is to enhance security and avoid guessing the background through common paths.

  2. Q: Why can't I access the admin panel even though I have set up an independent backend domain according to the steps?A: This is the most common reason when encountering this situation, it is that the domain name resolution or reverse proxy configuration in front of the server has not taken effect correctly.

    • Firstly, please check if your new domain name has been correctly resolved to the server IP. You can use the command line or an online tool to query it.ping admin.yourdomain.comor an online tool for query.
    • Ensure that the reverse proxy configuration of your Nginx or Apache web server, among others, is correct, especiallyproxy_passAddress and port whether pointing to the actual running address of the security CMS (default ishttp://127.0.0.1:8001), and the server has been restarted after the configuration has been modified.
    • Finally, make sure that the backend domain filled in the "Global Function Settings" on the Anqi CMS backend is complete (includinghttps://).

  3. Q: Do I need a separate backend domain for each of my multiple security CMS sites?A: If you are using the 'Multi-site Management' feature of Anq CMS, and all these sites are deployed under the same Anq CMS instance, then the setting of 'Independent backend domain' is for the backend entry of the entire Anq CMS instance.That is to say, all your multi-site will be managed through this independent backend domain.If you have physically deployed multiple independent security CMS instances (each running on a different port or different server), then each instance's backend can be configured with its own independent backend domain to achieve more detailed security management.