[Added] 2FA: Define Safe IP Addresses (nuBuilder 4.9.1)

[kev1n]

New Feature: Define Safe IP Addresses

You can now define a list of "safe" IP addresses to bypass the 2FA requirement for trusted networks.
If a user connects from a whitelisted IP, the two-factor authentication step will be skipped.

Supports IPv4, IPv6, and wildcard patterns (e.g. 192.168.*.*, 10.0.0.1, 2001:db8::/32).

Safe IPs are configured in nuconfig.php for both globeadmin and user accounts.

Code: Select all

$nuConfig2FASafeIPAddresses = [
    'globeadmin' => [
        '192.168.1.10', // Office main server
        '192.168.1.11', // Admin workstation
        '203.0.113.50', // Remote admin VPN
        '::1'
    ],
    'user' => [
        '*' => [ // Applies to ALL users
            '203.0.113.200', // Corporate VPN
            '198.51.100.100', // Office network
            '::1'
        ]
    ]
];

Read more about 2FA


Thanks Neil for your contribution!