Access Flow
Single-host route design keeps auth simpler.
Initial public and protected routes stay under one hostname so login
redirects, cookies, and security policy enforcement stay predictable.
/
/login
/dashboard
/api
/admin
/request-access
Controls
Operations built into the front door.
Every route decision in this phase is designed around protected entry,
bot friction, auditability, and clean future separation into dedicated
admin or API hosts if needed.
- Login and failed access logging
- Hidden honeypot field on access requests
- Space reserved for Authentik forward-auth rules
- Monitoring compatibility for Grafana and security events