2fabot

2fabot

NOTE: This project is under development, and should be considered alpha state.

2fabot is a Slack bot that will regularly check the 2fa status of a list of users on various services and will send them a Slack message if they are missing 2fa on some of the services, letting them know how they can enable it.

Setup

You need a Slack bot user that the reminder messages will be sent from. This bot user can be created by going to your team's settings page and creating a new bot user.

You will also need configuration for each individual service that you want to check two-factor status for. Documentation for that is listed below.

Configuration

2fabot is configured through environment variables. There are two global environment variables and then a set of environment variables for each service you wish to add.

• SERVICES:

• SLACK_TOKEN: A token for a bot user on the Slack team you wish to send the reminders on. See the "Setup" section above for how to make a bot user.

• MESSAGE_TEMPLATE: A template for the Slack message to be sent to users with at least one service missing two-factor authentication. For example, it could look something like this:

  Hi! It looks like you're missing two-factor authentication on some services, could you please look into enabling it once you have a free moment? {{ range . }}- {{ .Description }} (how to enable: {{ .URL }}) {{ end }}

License

2fabot is released under the MIT license, see the LICENSE file in this repository for details.