[Feature]: Add a extra security layer

[murmelbahn]

Feature detail

Hi, immich is really great and I like it but one thing need to be changed. We should be able to use fail2ban for failed login attempts. Is it possible to write to a logfile outside the container these attempts with the IP of the "attacker"?

Another nice feature would the implementation of a 2fa provider for an extra layer of security.

Thanks for this wonderfull project!

Platform

Web

[pluja]

I second that it would be a very good "extra security layer" for the login part to have 2FA like a TOTP code.

[bo0tzz]

IP logging would be accomplished with #732. 2FA would be covered by the already planned OAuth feature (#33).