Skip to content
GitHubLinkedIn

API proxy (development)

hook.lef.software is an inbound API endpoint used by development environments. It is not meant to be generally publicly accessible; access should remain restricted (policy-based, allowlist, or auth at the application layer).

  • Published via the reverse proxy on web.core.lef (np-web) (vhost: hook.lef.software.conf).
  • The upstream/back-end mapping lives in the NGINX vhost config on web.core.lef.
  • Treat this as a security-sensitive endpoint: confirm the access model before exposing it to the internet.
  • If traffic doesn’t reach the backend, check perimeter forwarding/firewall rules and reverse proxy logs first.
  • Endpoint accidentally becomes an open public ingress.
  • DNS/vhost drift breaks integrations.