How to Harden a Matomo Installation?

[melbao]

Using .htaccess to restrict access

This is an example .htaccess file that can be used to restrict outside (anonymous) access to your Piwik installation. Use in conjunction with the HttpAuthLogin plugin. # Sample .htaccess file for your web document root # Restrict outside access AuthUserFile /absolute_path_to_a_secure_folder/.htpasswd AuthGroupFile /dev/null AuthName "Piwik" AuthType Basic <Files "*"> Require valid-user </Files> <Files ~ "^piwik\.(js|php)|robots\.txt$"> Allow from all Satisfy any </Files> # Disa…