How to access admin panel in my localhost while the forum will be used over lan...so i need to secure my admin panel against brute force. or
login admin panel with specific ip alone
I would probably use your proxy (nginx/apache) to block requests to /admin
This is probably the more recommended approach, than building the feature into nodebb itself
YMMV but give this a try:
location /admin {
allow 127.0.0.1;
deny all;
}
@julian and @psychobunny thanks for the answer! let me try it!
@psychobunny @julian
A special user/group for the ACP would be nice to have, though.
I am thinking in terms of: Intrusion starts with spotting the user with desired credentials. This way administrator/moderator/team accounts couldn't be targets to any attacks. As such a username (account with ACP access) wouldn't be exposed to the public, whatsoever.
But since many BBs, for many years did well without it, I come around to the first line: "Nice to have". 
