Module for odoo 8 and 11 available on Github. Some tips found on the web hides only the link from Odoo homepage however URL are still reachable (~/web/database/manager). By installing this module, it will filter the access to Odoo database manager through the controller except connections coming from IPs listed in system parameters. Whitelist option: Key: disable_database_manager.database_manager_whitelist Value: 192.168.1.1,192.168.1.2,etc… This module will avoid unwanted connections attempts and secure your database manager access. Works with NGINX with some modification on nginx config file, click here for more detail. To disable completely database manager access: Add list_db = False in odoo.conf / …

Odoo community is not protected against brute force attack by default, the system is vulnerable over internet, however Odoo store provides auth_brute_force App which can handle this task, it’s available through this link. But it doesn’t work correctly behind a reverse proxy such as Caddy or Nginx. In the second part of this post, i’ll explain the little tip to make it work. Download and install the module Download the file corresponding to your version of Odoo. Unzip the file “auth_brute_force-9.0.1.1.0.zip”. Move the folder “auth_brute_force” to your module folder: “/usr/lib/python2.7/dist-packages/openerp/addons/“. Enable the developper mode through “About” popup. Then go to …