-
Notifications
You must be signed in to change notification settings - Fork 25
Description
Hey,
so, I'm not really a big fan of simple password authentication schemes to be able to access the administrative part of anything exposed to the internet.
I'm exposing Wrapperr via a reverse proxy with https to let my family and friends get a neat statistic at the end of the year.
Its trivial to setup https but that is kind of not doing much when the login scheme for the administration is just basic, I am of course referring to the administrative user and not the users themselves as they use plex authentication. With all the bot scans and stuff going on its kind of a red flag for me.
There needs to either be some way to disable the admin page as a whole after you've configured it, like setting a docker variable to "false".
Or there's urgent need to implement MFA support. Trusting a password alone is a bit .. lacking.
I'm using Unraid 7.2.2 and running your official docker (via the docker app-"store" integration in Unraid) - Wrapperr is version 3.2.10 just to provide some context.
I'd like to also say that this is a really neat service and solution, so thank you very much for your hard work ! :)