mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
8aade7f40e
* added regulation validator * made regulations find_time and ban_time values duration notation strings * added DefaultRegulationConfiguration for the validator * made session expiration and inactivity values duration notation strings * TOTP period does not need to be converted because adjustment should be discouraged * moved TOTP defaults to DefaultTOTPConfiguration and removed the consts * arranged the root config validator in configuration file order * adjusted tests for the changes * moved duration notation docs to root of configuration * added references to duration notation where applicable * project wide gofmt and goimports: * run gofmt * run goimports -local github.com/authelia/authelia -w on all files * Make jwt_secret error uniform and add tests * now at 100% coverage for internal/configuration/validator/configuration.go
34 lines
1.1 KiB
Markdown
34 lines
1.1 KiB
Markdown
---
|
|
layout: default
|
|
title: Regulation
|
|
parent: Configuration
|
|
nav_order: 7
|
|
---
|
|
|
|
# Regulation
|
|
|
|
**Authelia** can temporarily ban accounts when there are too many
|
|
authentication attempts. This helps prevent brute-force attacks.
|
|
|
|
## Configuration
|
|
|
|
```yaml
|
|
regulation:
|
|
# The number of failed login attempts before user is banned.
|
|
# Set it to 0 to disable regulation.
|
|
max_retries: 3
|
|
|
|
# The time range during which the user can attempt login before being banned.
|
|
# The user is banned if the authentication failed `max_retries` times in a `find_time` seconds window.
|
|
# Find Time accepts duration notation. See: https://docs.authelia.com/configuration/index.html#duration-notation-format
|
|
find_time: 2m
|
|
|
|
# The length of time before a banned user can sign in again.
|
|
# Find Time accepts duration notation. See: https://docs.authelia.com/configuration/index.html#duration-notation-format
|
|
ban_time: 5m
|
|
```
|
|
|
|
### Duration Notation
|
|
|
|
The configuration parameters find_time, and ban_time use duration notation. See the documentation
|
|
for [duration notation format](index.md#duration-notation-format) for more information. |