# Restrict Access of Public Facing Services to Authorised Personnel only
**URL:** https://community.traefik.io/t/restrict-access-of-public-facing-services-to-authorised-personnel-only/11143
**Category:** Traefik v2
**Tags:** kubernetes-ingress
**Created:** [July 9, 2021, 8:02am UTC](https://community.traefik.io/t/restrict-access-of-public-facing-services-to-authorised-personnel-only/11143 "2021-07-09T08:02:07Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@WeiTangLau](https://community.traefik.io/u/WeiTangLau)
#### Post date: [July 9, 2021, 8:02am UTC](https://community.traefik.io/t/restrict-access-of-public-facing-services-to-authorised-personnel-only/11143/1 "2021-07-09T08:02:08Z")
Let's say I have multiple services (e.g. Traefik dashboard and Grafana).
These services have to be exposed to the public, but only limit to authorised personnel only (e.g. Staff working from home). How is this achievable?
I am thinking of using VPN along with Basic Auth. However, I am not sure whether is this secure. Any help is recommended! Thanks in advance! 🙂
---
### Author:  [@cakiwi](https://community.traefik.io/u/cakiwi)
#### Post date: [July 9, 2021, 12:13pm UTC](https://community.traefik.io/t/restrict-access-of-public-facing-services-to-authorised-personnel-only/11143/2 "2021-07-09T12:13:11Z")
There are quite a few ways to achieve this.
> [@WeiTangLau](#):
>
> These services have to be exposed to the public, but only limit to authorised personnel only (e.g. Staff working from home). How is this achievable?
These two items are mutually exclusive. Being accessible over regular internet and restricted to authorized personnel is more likely.
VPN would suggest that the services are not publicly routable.
Grafana as it has its own Authentication and Authorization. So no real need for basicAuth.
Other options could involve mTLS or [forwardAuth middleware](https://doc.traefik.io/traefik/middlewares/forwardauth/), any option should use TLS.