Request: Allow longer session expiration time for admin
If we could set a time limit for the admin user to longer than whatever it is (say 1 day for example), this would be great. I recognize the security thoughts behind this may be limiting, but assuming that the admin accepts all risks may help.
4 Comments
Hi :)
Please see here about the session timeout environment variable :
Do you think we could possibly create "Admin IPs" area so ips that fall into that admin ip list can be assigned a policy like "Persistent login" whilst Ips outside that list are given more stricter enforcements?
My IP is dynamic so it would change every so often (public IP that is). So using a Admin IP's area would be okay except in the case of a Dynamic IP which changes frequently. Mine not so often. In lieu of this, what about just linking it to the User's role? Or a per user basis?
Do you think we could possibly create "Admin IPs" area so ips that fall into that admin ip list can be assigned a policy like "Persistent login" whilst Ips outside that list are given more stricter enforcements?
In the front end or back end or where in the docker compose? Your doc's don't specify. I added it under the backend section and it didn't have any effect on the time out. (I set it for 3600 minutes or 1 day) to test this.
Never Mind, I installed the LXC version for Proxmox and figured out the timeout by editing the .env file. I think Docker is a bit more confusing for editing a core file like this with the existing instructions.