Need to separate an admin side from the client. This will allow us to build admin tools locked behind an NGINX that only allows local IP’s etc.
It will need the following features:
Break down money coming in and out.
Show admin info such as IP etc to research if a user is a bot. Ideally we may hash the IP to protect user privacy, but still be able to tell whether they are coming from commonly used grey space VPN’s.
Tag users as HUMAN GOVERNMENT etc. The database can handle this already, just need an admin portal to make changes etc.
Edit user accounts if needed ie change an email or other settings as needed for account recovery.
Make it require super admin mode to access which means NGINX allowed IP, specific user IE my account or your account, forced 2fa auth, and a PIN number to login.
It does not need to be pretty, just work well enough for us to admin accounts without having to turn on my raspberi pinto login to the production database.