Closes #2371

[JustArchi]

Closes #2371

@vital7 @Abrynos @Ryzhehvost feel free to review and test.

[JustArchi]

https://github.com/JustArchiNET/ArchiSteamFarm/wiki/IPC#custom-configuration

KnownNetworks - This variable specifies network addresses which we consider trustworthy. By default, ASF is configured to trust private address space, which considers your LAN, VPNs and alike. This property is used in two ways. Firstly, if you omit IPCPassword, then we'll allow only machines from known networks to access ASF's API, and deny everybody else as a security measure. Secondly, this property is crucial in regards to reverse-proxies accessing ASF, as ASF will honor its headers only if the reverse-proxy server is from within known networks. Honoring the headers is crucial in regards to ASF's anti-bruteforce mechanism, as instead of banning the reverse-proxy in case of a problem, it'll ban the IP specified by the reverse-proxy as the source of the original message. Be extremely careful with the networks you specify here, as it allows a potential IP spoofing attack and unauthorized access in case the trusted machine is compromised or wrongly configured. If by any case you're connected to a private network that you do not trust, yet you still decided to enable access from them through Endpoints specified above, then you can override this property to something more restrictive such as "KnownNetworks": [] in order to remove the default behaviour of trusting them.

[JustArchi]

I'm still deciding upon the default behaviour with local networks, I left that one up to our Discord server to decide: https://ptb.discord.com/channels/267292556709068800/363458066722848779/863752421838290974

[JustArchi]

As per our voting, it seems more people are after NOT trusting local networks than do trusting them, so I changed the default to that. I'll still wait a bit more for the voting to stabilize and end, but I see lack of trust as clear winner for now.

[Abrynos]

We could also add something like "TrustLocalNetworks": false to ASF.json.

Not that I particularly like the thought of adding new config options, which are also possible to set in IPC.config, but a lot of users seem to have difficulty finding out about IPC.config in the first place (my guess is: nobody scrolls to the bottom of IPC section on our wiki without being told to do so on our discord server).

[JustArchi]

No redundant, duplicate settings that achieve the same, if anything, we could bring the custom config of IPC up.

[Abrynos]

if anything, we could bring the custom config of IPC up.

Please do so. The whole thing about the API, swagger, authentication, etc. is more aimed at developers rather than users anyways and I do believe that we should optimize slightly more towards users in wiki.

[JustArchi]

I slightly reordered that so custom config is higher, but everything on that page is equally important.

[JustArchi]

Thanks for feedback everyone 🏆