2-Factor Authentication (2FA)

[yocker 1307]

Disable admin account from outside and use VPN when needing to use the admin account should make files secure.
Keep an eye on where users connect from once in a while, there are plugins for that.
Blacklist countries you have no users in.
Make sure users don't set 1234 as password.. Emby needs a feature for minimum lenght and special character passwords
Correctly set up proxy instead of direct Emby access.
Tailscale funnel also works very nicely and doesn't require "outsiders" to have tailscale.

Not saying 2fa isn't needed, just that there are other ways to secure the server.

[muzicman0 85]

I honestly don't understand the 2fa on just admin accounts.  I don't want ANYONE logging into my server that I don't know, admin or not.