search

NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
20.82k stars 2.42k forks source link

Two-Factor Auth #313

Open meichthys opened 4 years ago

meichthys commented 4 years ago

Two-Factor authorization would be a very welcomed feature in my book.

To be able to log into nginx-proxy-manager via 2FA as well as being able to provide 2FA for access to hosts - this would vastly improve the security of less secure or non-secure applications hiding behind the nginx proxy.

Something like Authelia should provide a good starting point.

arejaytee commented 4 years ago

+1 on this or implementing https://github.com/jc21/nginx-proxy-manager/issues/137

Rami-Pastrami commented 4 years ago

Noting https://github.com/authelia/authelia for being maintained actively currently, and having more features

KamistixX commented 4 years ago

Authelia integration would be a massive feature

james-d-elliott commented 4 years ago

One of the maintainers of Authelia here. We'd be willing to do some form of collab to help with this. Particularly with the access to the hosts section as that is the easiest part. I also think this would actually address a few of your issues all at once (I'll try to compile a list later and the reasons why).

Ideally if we did it I think the ideal place to do it is in the access tab as an alternate provider to the HTTP basic auth. Also it shouldn't be limited to Authelia in my opinion, people should be able to configure all aspects of the ngx_http_auth_request_module.

Authelia docs.

KittyKatt commented 4 years ago

This would actually bring me back to nginx-proxy-manager over some other solution as there's no other solution with as easy of a point and click interface as this, but vanilla nginx supports this with Authelia's guide so I've been sticking with that.

Rami-Pastrami commented 4 years ago

TBH I would even be happy for a guide to add Authelia to NginxProxyManager

lazee486 commented 4 years ago

+1 I opened a request for voucher-proxy or keycloak before I found this one, but any route he goes with I'd be willing to try :) his interface is one of the best I've found for homelab!

zero77 commented 3 years ago

Google provide a 2FA module that can be integrated with protocols like SSH and OpenVPN. https://github.com/google/google-authenticator-libpam

joe307bad commented 3 years ago

Keycloak works with nginx-proxy-manager!

joe307bad commented 3 years ago

Here is also a good tutorial on getting nginx-proxy-manager secured with Authelia.

jeremy-chua commented 3 years ago

IMHO, integration with most IdP will address this. SAML2 will be a common use case. I'm using Azure AD for my hosted applications. MFA can be configured in Azure AD. I believe it will be similar for all IdP.

apainter2 commented 3 years ago

I too would love to see NPM support Google Authenticator/2FA.

Especially as I have NPM internet facing on a hosted VPS.

kennylajara commented 3 years ago

Is possible to make use of this Authenticator API implementation to easily integrate: https://github.com/infiniteloopltd/AuthenticatorAPI.com

meichthys commented 2 years ago

@kennylajara could you share how you implemented this?

rickgitdone commented 1 year ago

I also found this on git .. allows 2FA for any Web App.. Integration with any of these into one is a goal I am looking for ... https://github.com/Arno0x/TwoFactorAuth

LiaraAlis commented 10 months ago

I think this is a very important feature. From my point of view this feature should be prioritized higher.

anasnaguib commented 10 months ago

I think this is a very important feature. hope it can be added soon.

CrooLyyCheck commented 9 months ago

Two-Factor authorization would be a very welcomed feature in my book.

To be able to log into nginx-proxy-manager via 2FA as well as being able to provide 2FA for access to hosts - this would vastly improve the security of less secure or non-secure applications hiding behind the nginx proxy.

Something like Authelia should provide a good starting point.

Also access list is good place to implement 2fa auth thru simple page instead HTTP auth form

github-actions[bot] commented 1 month ago

Issue is now considered stale. If you want to keep it open, please comment :+1:

timnolte commented 1 month ago

If 2FA can't be done then implementing OpenID Connect for SSO authentication would be the next best thing.

james-d-elliott commented 1 month ago

It can technically already be integrated for backend apps already, just not the NPM frontend. I think having both would be a good addition however, and fully support the idea of OpenID Connect 1.0, in a lot of ways I prefer it. Me and the other Authelia devs would welcome a collaboration on this as well.