Separate Matomo Tracking URL from UI (matomo nginx proxy)

Hello

I have a question security related question

We use nginx as proxy.
Is it possible to publicly allow access to tracking related urls while UI is only accessible via IP restriction.

I know nginx configuration but what are the tracking related urls?
Which urls/files are needed from the tracking?

Thank you!

For tracking, you need access to:

  • The Matomo JavaScript tracking file: /matomo.js (if you don’t use the Whitelabel premium feature tracking endpoint)
  • The MTM containers repository (if you use Matomo Tag Manager - it should be /js)
  • /matomo.php (if you don’t use the Whitelabel premium feature tracking endpoint)