Disabling /api and /api/swagger endpoints

[0rzech]

It would be nice, if there were options to disable /api and /api/swagger endpoints.

[lafriks]

What is use case for disabling API?

[0rzech]

When one doesn't want to expose it at all, eg. to reduce attack surface.

[lafriks]

You can use nginx in front of gitea and than disable everything starting with /api

[0rzech]

Yes, but the link to API will remain in footer.

[lafriks]

It will not work anyway ;) not the best option but you can change template if that is really needed

[0rzech]

Yes, but IMHO it's a bit too dirty to change template and server configuration to achieve that.

[lafriks]

Of course option to hide swagger link can be added

[0rzech]

Cool. Thanks for your input.