# Admin UI open if VPS firewall misconfigured (crowdsec\_manager #132)

**URL:** <https://forum.hhf.technology/t/admin-ui-open-if-vps-firewall-misconfigured-crowdsec-manager-132/4569>\
**Category:** CrowdSec Manager\
**Tags:** issue\
**Created:** [July 20, 2026, 5:55pm UTC](https://forum.hhf.technology/t/admin-ui-open-if-vps-firewall-misconfigured-crowdsec-manager-132/4569 "2026-07-20T17:55:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://forum.hhf.technology/user_avatar/forum.hhf.technology/system/32/16_2.png) [@system](https://forum.hhf.technology/u/system)\
**Post date:** [July 20, 2026, 5:55pm UTC](https://forum.hhf.technology/t/admin-ui-open-if-vps-firewall-misconfigured-crowdsec-manager-132/4569/1 "2026-07-20T17:55:41Z")

</div>

> 🐙 **GitHub issue [crowdsec\_manager #132](https://github.com/hhftechnology/crowdsec_manager/issues/132)**, opened by **`rxbrad`** on GitHub

When using the Docker Compose template, this section:

```auto
    ports:
      - "8080:8080"

```

…leaves the Crowdsec Manager UI open to the web (even when Pangolin authentication is used) using `http://[IP addrress]:8080` when someone does not have their VPS firewall configured correctly.

Port 8080 was wide open with RackNerd’s default firewall settings (because published ports get opened up on `ufw` in a standard Docker+Portainer install) – and Racknerd is widely used by Pangolin users via their affiliate deals.

Perhaps suggest removing the port assignment in the sample Compose and instead relying on Docker Networking in Pangolin between the Gerbil & Crowdsec Manager containers to secure it.

* * *

💬 Discuss it here. Status, fixes and code review stay on [GitHub](https://github.com/hhftechnology/crowdsec_manager/issues/132).