ArgusLogs best practices

Log viewers expose production traffic — URLs, identifiers, SQL, and sometimes payloads. Never leave /argus-logs open on the public internet without authentication.

• Enable RequireLogin on ArgusLogs.UI or add AspNetCoreUserAuthorizationFilter when the host app already authenticates users.
• Store dashboard credentials in environment variables or secret managers — not source control.
• Combine RequireLogin with LocalRequestsOnlyAuthorizationFilter for local diagnostics on shared servers.
• Place UseArgusUI after UseAuthentication() when integrating with JWT or cookie auth from your API.

app.UseArgusUI(options =>
{
    options.RoutePrefix = "/argus-logs";
    options.RequireLogin("admin", Environment.GetEnvironmentVariable("ARGUS_UI_PASSWORD")!);
    options.AddAuthorizationFilter(new LocalRequestsOnlyAuthorizationFilter()); // optional: localhost only
});