edits

Author: travisamartin

content/includes/use-cases/monitoring/enable-nginx-plus-api.md

@@ -8,37 +8,49 @@ files:
 To collect comprehensive metrics for NGINX Plus -- including bytes streamed, information about upstream systems and caches, and counts of all HTTP status codes -- add the following to your NGINX Plus configuration file (for example, `/etc/nginx/nginx.conf` or an included file):
 
 ```nginx
-# Server block for enabling the NGINX Plus API and dashboard
-#
-# This block requires NGINX Plus. It turns on the API in write mode
-# and serves the built-in dashboard for monitoring.
-# Change the listen port if 9000 conflicts; 8080 is the conventional API port.
-# For production, secure the API with TLS and limit access by IP or auth.
+# This block:
+# - Enables the read-write NGINX Plus API under /api/
+# - Serves the built-in dashboard at /dashboard.html
+# - Restricts write methods (POST, PATCH, DELETE) to authenticated users
+#   and a specified IP range
 server {
-    # Listen for API and dashboard traffic
-    listen 9000 default_server;
-    server_name localhost;
+    listen       9000 default_server;
+    # If port 9000 is in use, you can also use 8080:
+    # listen     8080 default_server;
+    server_name  localhost;
 
     # Handle API calls under /api/ in read-write mode
     location /api/ {
         api write=on;
+
+        # allow GET from anywhere
+        allow 0.0.0.0/0;
+        deny all;
+
+        # require auth and limit write methods to your network
+        limit_except GET {
+            auth_basic           "NGINX Plus API";
+            auth_basic_user_file /etc/nginx/conf.d/api.htpasswd;
+            allow                192.0.2.0/24  # example IP range; replace with yours
+            deny                 all;
+        }
     }
 
     # Serve the dashboard page at /dashboard.html
     location = /dashboard.html {
         root /usr/share/nginx/html;
     }
 
-    # Redirect any request to the root path “/” to the dashboard
+    # Redirect any request to “/” to the dashboard
     location / {
         return 301 /dashboard.html;
     }
 }
 ```
 
-For more details, see the [NGINX Plus API module documentation](https://nginx.org/en/docs/http/ngx_http_api_module.html).
+For more details, see the [NGINX Plus API module documentation](https://nginx.org/en/docs/http/ngx_http_api_module.html) and [Configuring the NGINX Plus API]({{< ref “nginx/admin-guide/monitoring/live-activity-monitoring.md#configuring-the-api” >}}).
 
-After saving the changes, reload NGINX to apply the new configuration:
+After saving the changes, reload NGINX:
 
 ```shell
 nginx -s reload

content/nginx-one/workshops/lab2/run-workshop-components-with-docker.md

@@ -48,9 +48,9 @@ Make sure you have:
    cd static/workshops/nginx-one/lab2
    ```
 
-This folder contains `docker-compose.yml` and `generate_certs.sh`.
+This folder contains `compose.yaml` and `generate_certs.sh`.
 
-{{<fa "download">}} {{<link "/workshops/nginx-one/lab2/docker-compose.yml" "Download docker-compose.yaml">}}
+{{<fa "download">}} {{<link "/workshops/nginx-one/lab2/compose.yaml" "Download compose.yaml">}}
 
 {{<fa "download">}} {{<link "/workshops/nginx-one/lab2/generate_certs.sh" "Download generate_certs.sh">}}
 

content/nginx-one/workshops/lab4/config-sync-groups.md

@@ -117,7 +117,7 @@ You can edit the `docker-config.yaml` file to add those instances to the config
    docker compose down
    ```
 
-2. Open `docker-compose.yaml` in a text editor.
+2. Open `compose.yaml` in a text editor.
 3. Uncomment the lines beginning with:
 
    ```yaml

content/nginx-one/workshops/lab5/upgrade-nginx-plus-to-latest-version.md

@@ -48,7 +48,7 @@ Make sure you have:
      --username "$JWT" --password-stdin
    ```
 
-2. Open `docker-compose.yaml` in a text editor and uncomment the **plus4** service block (lines 74–95). This block pulls the latest Debian NGINX Plus image with the latest NGINX Agent installed, and sets your data plane key, JWT, and config sync group.
+2. Open `compose.yaml` in a text editor and uncomment the **plus4** service block (lines 74–95). This block pulls the latest Debian NGINX Plus image with the latest NGINX Agent installed, and sets your data plane key, JWT, and config sync group.
 
    ```yaml
    plus4: # Debian latest NGINX Plus Web / Load Balancer