[Feature Request] restrict login to a local network.

[Jurrer]

Hello, I am looking for a feature to only allow logins from a local network as a safety feature.

In my use case there is no point in exposing the login/administration endpoints. I would look for a feature separating the invite flow and administration flow between networks.
It would significantly improve security, decreasing possible attack paths.

If wizarr is behind a reverse proxy it can easily read client ip it from headers, as long as we have something like trusted proxy setting.
Cheers

[tickzip]

You can do something like this at the reverse proxy end. E.g. with caddy

wizarr.example.com {
    @allowed_path {
        path_regxp # use https://docs.wizarr.dev/using-wizarr/single-sign-on-sso
    }
    handle @allowed_path {
        reverse_proxy localhost:5690
    }
    @local remote_ip private_ranges
    handle @local {
        reverse_proxy localhost:5690
    }
    handle {
        respond "Forbidden" 403
    }
}