2FA through WAN but not LAN

besgum

Member
May 24, 2022
7
0
6
Hi all! I have a domain pointing to my server, with nginx reverse proxy, cloudfare and SSL. All is working well, what I want is to use 2FA only outside my home and not on lan. Is there a way to do this? I´m not able to install a VPN on my job computer, so I need to expose the server to the web, but I want more security
I found its easy to add 2FA using TOTP gui, but nothing regarding my inquiry

Thanks for the guidance!!
 
Add a reverse proxy in front of your PVE login page from the internet. I would never expose a management interface - not even PVE - without additional security to the internet.
 
Add a reverse proxy in front of your PVE login page from the internet. I would never expose a management interface - not even PVE - without additional security to the internet.
I am running port forwarding through PFSense and only allow my local IP address through.
 
I use Apache Gucamole with 2FA enabled to access all my VMs via browser from the WAN. I can then work without 2FA within the network.