Open zero77 opened 3 years ago
This sounds a bit much for qbittorrent. You're better off putting something else in front of qbittorrent. Something that is designed with such security in mind. eg make it listen for the WebUI only on the localhost and then use a VPN or SSH to access it. And manage VPN/SSH access only through keys/certificates.
Can you please add 2FA to provide additional security before being able to login to the webui.
Google already provide a 2FA module that can be integrated with protocols like SSH and OpenVPN. https://github.com/google/google-authenticator-libpam