Secure admin permissions behind a TOTP/2FA prompt and avoid server destruction.
tuxsudo is a bot that allows server owners to secure admin permissions behind a TOTP prompt to avoid server destruction.
How to set up tuxsudo in your server
- Set up the server
Server owners/managers can set up the server with /sudo-setup and configure three simple settings from the prompt. Make sure the sudo role is below tuxsudo's highest role and has elevated permissions.
- Admins register their authentication app
Admins will then use /sudo-user to register a TOTP authenticator app to their account. Admins will be given a prompt to add tuxsudo to their authentication app and will also be given backup codes.
- Owners must trust the admin
Server owners/managers then need to trust that admin with /sudoers trust in order for them to elevate permissions. This way, you acknowledge that the user on the admin account should be trusted with permissions. If they reset their account or leave the server, their trust is removed.
