docs: add section about how to disable path based apps to security best practices (#18419)

add a new section specifically about how to disable path-based apps to
the security best practices doc

## todo

- [x] copy review
- [x] cross-linking

---------

Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com>
Co-authored-by: Dean Sheather <dean@deansheather.com>
This commit is contained in:
Edward Angert
2025-07-01 13:18:47 -04:00
committed by GitHub
co-authored by EdwardAngert Dean Sheather
parent d14e9be0fe
commit ab254adfb9
2 changed files with 29 additions and 0 deletions
+2
View File
@@ -60,6 +60,8 @@ If you are providing TLS certificates directly to the Coder server, either
options (these both take a comma separated list of files; list certificates
and their respective keys in the same order).
After you enable the wildcard access URL, you should [disable path-based apps](../../tutorials/best-practices/security-best-practices.md#disable-path-based-apps) for security.
## TLS & Reverse Proxy
The Coder server can directly use TLS certificates with `CODER_TLS_ENABLE` and