odiby Posted June 12, 2020 Share Posted June 12, 2020 (edited) It would be great if we can expose the GUI easily to the Internet. The major concerns with that ... - the default user named 'root' - no 2-FA - no fail2ban - ... I know there is always a way to get things up and running, but it would be awesome to see this as default options in a future release. so, please add those features as a default to this already great product. (I read about that, but its outdated) Edited June 12, 2020 by odiby Quote Link to comment
itimpi Posted June 12, 2020 Share Posted June 12, 2020 It is easy to set up the WireGuard VPN server on the 6.8.3 version of Unraid to give you secure access to the Unraid GUI from then internet. More than this might be desirable, but at the very least users should be using a VPN solution for accessing the Unraid GUI from the internet. 1 Quote Link to comment
odiby Posted June 12, 2020 Author Share Posted June 12, 2020 (edited) Oh ok, thats easy. I found that guide for all of you who would like to give that solution a try. I can easy set up a VPN in my unifi controller... but I guess it is way more user friendly to access the server via a subdomain for example. From the security point of view, that should not be a huge problem with the mentioned provisions. Edited June 12, 2020 by odiby link to guide added Quote Link to comment
bastl Posted June 12, 2020 Share Posted June 12, 2020 @odiby It's always a bad idea to expose your server directly to the internet. We had a couple people already in the forums which thought it is a good idea to place there servers in a DMZ, no extra firewall or security features of their routers active. And what happened was they got bombarded with thousands of login attempts, flooding the logs, crashing the server. Even with whitlists for accesing the server or 2FA the servers will be flooded with traffic from unknown sources. With no extra infrastructure you won't be able to prevent this from happening. Best practise is to use a vpn to access your data and with wireguard and openvpn you have all the tools you need. Quote Link to comment
ricain59 Posted June 20, 2022 Share Posted June 20, 2022 Hello, It's possible have 2FA on web page login of unraid? thank you 1 Quote Link to comment
Squid Posted June 20, 2022 Share Posted June 20, 2022 Not currently, but probably soon-ish 1 Quote Link to comment
iXNyNe Posted July 5, 2022 Share Posted July 5, 2022 I don't have any knowledge about how logins are handled with the web UI, but I believe unRAID's web UI is written in PHP, and maybe something like this could be used https://packagist.org/packages/pragmarx/google2fa-qrcode I have implemented 2fa in some other projects using that library. It's been very nice to work with. 1 Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.