Quarantine your domain
Appwarden lets you instantly quarantine your domain with a single Discord command, immediately disabling all user interaction to mitigate active security breaches. This is known as quarantining your domain.
When quarantined, all users are redirected to a static page of your choice, effectively preventing your website from potentially harming users in a worst case scenario. During a security breach, this instant quarantine capability can mean the difference between containing the incident and suffering catastrophic damage to your reputation and user assets.
To enable Appwarden to quarantine your domain, please complete the Getting Started guide. The guide will walk you through installing the Appwarden Discord bot, installing the Appwarden middleware, creating an API token, and verifying your domain.
To quarantine your domain, issue the following command from Discord:
/quarantine lockAfter selecting a domain, Appwarden will respond with a confirmation message and quarantine your domain after a few seconds. All users will be redirected to a static page of your choice.
In order to quarantine a domain, the domain must be verified. Verify your domain status by navigating to Settings > Monitoring in the Appwarden dashboard and checking the Domain Verification card.
To unlock your domain and enable users to interact with your website, issue the following command from Discord:
/quarantine unlock
In order to unlock a domain, the domain must be verified. Verify your domain status by navigating to Settings > Monitoring in the Appwarden dashboard and checking the Domain Verification card.
To test if Appwarden is correctly configured to quarantine your domain, issue the following command from Discord:
/quarantine testAppwarden will respond with a confirmation message and place a test route into quarantine. Navigate to the test route at https://your.app/_appwarden/test in your browser to ensure that the quarantine is functioning correctly.
When you quarantine your domain, Appwarden redirects all users to a static page of your choice. To set up a lock page, create a new route in your project that renders a message to your users informing them that the domain is temporarily unavailable.
The /maintenance route is a common choice for a lock page because it can be used as both a
maintenance and a lock page.
In your domain configuration file, update the middleware entry with your desired lock-page-slug and push the changes to your domain configuration repository, then redeploy your middleware.
In your Appwarden middleware configuration, set the lockPageSlug to the route that renders your lock page. For example, if your lock page is at /maintenance, set the lockPageSlug to /maintenance.
export default createAppwardenMiddleware({ lockPageSlug: "/maintenance",})