From 90b43e154a97e5ad31da79a6804e39d701f055b7 Mon Sep 17 00:00:00 2001 From: Andrew Berry Date: Wed, 6 Mar 2024 10:46:14 -0500 Subject: [PATCH] Documentation: add additional information about Django admin remaining accessible with `PAPERLESS_DISABLE_REGULAR_LOGIN` (#5993) --- docs/configuration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/configuration.md b/docs/configuration.md index b1e882845..85bf940bc 100644 --- a/docs/configuration.md +++ b/docs/configuration.md @@ -585,7 +585,7 @@ system. See the corresponding #### [`PAPERLESS_DISABLE_REGULAR_LOGIN=`](#PAPERLESS_DISABLE_REGULAR_LOGIN) {#PAPERLESS_DISABLE_REGULAR_LOGIN} -: Disables the regular frontend username / password login, i.e. once you have setup SSO. Note that the Django admin login cannot be disabled. +: Disables the regular frontend username / password login, i.e. once you have setup SSO. Note that the Django admin login cannot be disabled by Paperless. To prevent logins directly into Django, consider blocking `/admin/login` in your [web server or reverse proxy configuration](https://github.com/paperless-ngx/paperless-ngx/wiki/Using-a-Reverse-Proxy-with-Paperless-ngx). Defaults to False