From fb921b6e09e00e3cd34f54babc81521625420d81 Mon Sep 17 00:00:00 2001
From: inference-bot <inference-bot@hermes>
Date: Mon, 14 Sep 2026 16:21:34 -0600
Subject: [PATCH] Disable admin UI (/ui) and API docs (Swagger/ReDoc/openapi)
 on the public gateway

---
 start.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/start.sh b/start.sh
index b3e826c..d6251ac 100644
--- a/start.sh
+++ b/start.sh
@@ -65,6 +65,15 @@ export DISABLE_SCHEMA_UPDATE="false"
 export UI_USERNAME="admin"
 export UI_PASSWORD="${LITELLM_MASTER_KEY}"
 
+# DISABLE the admin UI and API docs. The gateway must stay publicly reachable
+# for the /v1 API (member keys), but we don't want to advertise a login-gated
+# admin console (/ui) or LiteLLM's Swagger/ReDoc/openapi surfaces. Admin
+# visibility comes from the admin dashboard / the API directly.
+export DISABLE_ADMIN_UI="True"
+export NO_DOCS="True"
+export NO_REDOC="True"
+export NO_OPENAPI="True"
+
 # Proxy settings for Cloudron's reverse proxy
 export LITELLM_PROXY_BASE_URL="https://${CLOUDRON_APP_DOMAIN}"