By default, the app's API is public. To avoid misuse, it's best to change the URL to some secret. To do so:
- Edit /app/data/env using the File manager
- Change API_PATH_PREFIX to some secret. You can generate a secret using pwgen -1s 6.
- Restart the app.
In the apps, use https://languagetool.domain.com/<secret>/v2 as the URL instead of the default https://languagetool.domain.com/v2.
To test, if hushhush is the secret:
curl -d "text=Hello world" -d "language=de-DE" https://languagetool.domain.com/hushhush/v2/check
Info: Use alphanumerals for the secret
The secret is part of the URL. For this reason, keep it simple and use only alphanumerals for the secret.