Is it possible to require 2FA for the login into the Web UI? We are looking to get cybersecurity insurance, and 2FA security on backup servers is one of their requirements.
UrBackup lacks built-in 2FA support, but protecting the Web UI with an authentication layer like Authentic, Authelia, or similar is the most common practical way to overcome this deficiency.
I could add optional TOTP (authenticator app) 2FA for web UI users: a per-user secret set up from the user’s settings, and a second step at login. Martin, would you take a PR like that? If so, is there anything you’d want handled a particular way, like recovery codes or what to do with the API/token logins?
That would be fantastic.