Homelab 2fa May 2026

access_control: default_policy: deny rules: - domain: "*.example.com" policy: one_factor - domain: "secure.example.com" policy: two_factor - domain: "auth.example.com" policy: bypass

totp: issuer: homelab.local period: 30 skew: 1 homelab 2fa

networks: homelab: external: false Critical sections for 2FA: access_control: default_policy: deny rules: - domain: "*

Example using age encryption: