Feature: 2FA support

[vins345]

Hi, please add 2FA support. Login and password is not secure in 2022.

[Protektor-Desura]

You should not be exposing your home server directly to the internet. You should be using a VPN when you need to access your home server when not a home. This is the most secure way to do things and you don't have to bother with reverse proxy and expose every service/server program on your network to the internet. I recommend WireGuard or even better ZeroTier or Tailscale instead. They are both open-source and you don't need to do any port forwarding or punch a hole in your firewall. Tailscale is built on top of Wireguard.

https://tailscale.com/
https://github.com/tailscale/tailscale

https://www.zerotier.com/
https://github.com/zerotier/ZeroTierOne

[Protektor-Desura]

Because it adds more complexity by being forced to have a domain name and set up a cert so you can do https for something that will never be accessible to the Internet.

Not everyone wants to buy a domain then go through the complexities of getting a secure cert then setting that up. It isn't even close to a couple of clicks and you're done or completely automated.

[vins345]

Because it adds more complexity by being forced to have a domain name and set up a cert so you can do https for something that will never be accessible to the Internet.

Not everyone wants to buy a domain then go through the complexities of getting a secure cert then setting that up. It isn't even close to a couple of clicks and you're done or completely automated.

SSL can by generated localy and add for local domain configured in router ".local". No need to buy anything fo https in local network. If http enough for user then can stay with http.

[Protektor-Desura]

Self signed certs are going to throw errors telling the user not to advance because it is unsafe. So self signed certs are not an answer because browers throw errors saying it is not safe.

[vins345]

Self signed certs are going to throw errors telling the user not to advance because it is unsafe. So self signed certs are not an answer because browers throw errors saying it is not safe.

just add them to client PC and browser will show the security lock icon.

[Protektor-Desura]

If you can not set it to click here to add your cert, then it is just going to create more support issues for having to explain things.

[DigitalRoadi3s]

if you're using file shares or Vaultwarden traffic to/from CasaOS should be encrypted.