search

h44z / wg-portal

WireGuard Configuration Portal with LDAP connection
https://wgportal.org/
MIT License
924 stars 126 forks source link

Idea for v2, admins can trigger "send email" with client config #119

Open zyxep opened 2 years ago

zyxep commented 2 years ago

Hi,

So, I've just setup the portal for my self and my co-workers. Got some of my co-workers connected and it works.

But here is my use case for this feature. I don't want to add the portal to be public accessed, not unless 2FA is on the login etc. So, I suggest that Admins in the portal can trigger a "Send client config" to the email fetched from LDAP/AD since the user it self has the option to get the client config send by Email.

Then IT departments can send the client config to the persons email address without seeing the config etc.

bbruun commented 2 years ago

Suggestion: let the email contain a link to wg-portal, requiring login and 2FA setup, to download the config. Sending the config via email is clear text and would contain the keys which is not good. Emails are not a trusted media.

h44z commented 2 years ago

Sending config via (plaintext) email is already possible. Sending links instead of the full configuration will be added to v2. So I don't really get the feature request here