Preview User

On all non PROD contexts, we configure basic authentication in front of your website. This will ensure that there is no content leaked into the world coming from one of your internal websites.

Default User

The default username is called preview. You can set the desired password in the Preview password field by either:

  • generate a new, random password through the Generate button

  • hash your desired password through with the htpasswd utility

  • supported hash algorithms: crypt, apr1 und SSHA

Change Username

Per Website

You can change the default username preview to a value of your own by setting the preview_username string within the Custom JSON Website Level Configuration:

{
  "preview_username": "mypreviewusername"
}

Globally

To change the default username for all websites on a given server, you can override the value website::preview_username within the Custom JSON Server Level Configuration:

{
  "website::preview_username": "myglobalpreviewusername"
}

Additional Users

To add additional users for all websites on a given server, you can set the website::users hash within the Custom JSON Server Level Configuration:

{
  "website::users": {
    "alice": {
      "preview": "$apr1$RXDs3l18$w0VJrVN5uoU6DMY.0xgTr/"
    },
    "bob": {
      "preview": "$apr1$RSDdas2323$23case23DCDMY.0xgTr/"
    }
  }
}

Tip

Add such additional users for yourself and your co-workers. You can use your own login on every website then.

Disable Authentication

You can disable the authentication altogether by de-selecting Enable preview auth on the websites Advanced tab.

Warning

After deselecting preview auth, the website will be reachable from everywhere. Make sure you do not leak private informations. Often, there are better suited alternatives like open access for certain ip address ranges only.