Enable Brute Force detection

didx-xyz · Apr 25, 2024 · 773f363 · 773f363
1 parent 0f318dd
commit 773f363
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/src/keycloak/exports/01-yoma-realm.yaml b/src/keycloak/exports/01-yoma-realm.yaml
@@ -35,14 +35,14 @@ loginWithEmailAllowed: true
 duplicateEmailsAllowed: false
 resetPasswordAllowed: true
 editUsernameAllowed: false
-bruteForceProtected: false
+bruteForceProtected: true
 permanentLockout: false
-maxFailureWaitSeconds: 0
-minimumQuickLoginWaitSeconds: 0
-waitIncrementSeconds: 0
-quickLoginCheckMilliSeconds: 0
-maxDeltaTimeSeconds: 0
-failureFactor: 0
+maxFailureWaitSeconds: 900
+minimumQuickLoginWaitSeconds: 60
+waitIncrementSeconds: 60
+quickLoginCheckMilliSeconds: 1000
+maxDeltaTimeSeconds: 43200
+failureFactor: 30
 roles:
   realm:
     - id: 25be88e1-2f97-4ea3-b936-a19a94e45a65