We removed our UniFi Super Admin
For increased security, and white-label ability, we have removed all of our Super Admin accounts from UniFi servers under Settings > Admins.
Previously, the accounts had long random passwords and were only used by our automated scripts to do nightly backups, and health checks on the servers, but as we have been encouraging 2FA for your UniFi accounts and deploying 2FA on our SSH accounts, we wanted to remove our Super Admin access for increased security as well.
We completely rewrote our backups process to enforce nightly backup settings in UniFi, and then copy the auto backups each night to DigitalOcean Spaces instead of needing the Super Admin account log in and take a manual backup.
Another benefit is that the servers can be fully white-labeled now. With no reference to HostiFi under Settings > Admins, and the ability to customize your domain name, your customers will have no way to know about us, which most of our MSP customers can appreciate!
|