andrew
3d28485921
Intending to build support for single-use backup codes. Started refactoring to move trait dependencies internally, so that classes only have to specify their own direct dependencies.
49 lines
1.9 KiB
Plaintext
49 lines
1.9 KiB
Plaintext
# --- Main Options ---
|
|
|
|
# URI containing secret and config for TOTP, which determines the token to login
|
|
# app will generate one, if not provided, but you should copy it to your .env file
|
|
# format: "otpauth://totp/<label>?secret=<secret-key>"
|
|
#TOTP_URI='' # blank to have the app generate one at random
|
|
|
|
# how long will someone stay logged in, measured in seconds, zero for DEFAULT
|
|
#COOKIE_TTL=2592000 # default 30 days
|
|
|
|
# NOTE: rate limiting can *NOT* be disabled,
|
|
# but you could allow hundreds of logins a second
|
|
|
|
# number of consecutive failed login attempts before we block the ip address
|
|
#LIMIT=4 # default 4 failed login attempts before blocking
|
|
|
|
# time between failed login attempts that are consecutive, in seconds, zero for DEFAULT
|
|
#LIMIT_TIMEOUT=21600 # default 6 hours
|
|
|
|
# how long a blocked ip address stay blocks, in seconds, zero for DEFAULT
|
|
#LIMIT_TTL=86400 # default 24 hours
|
|
|
|
# --- Extra Options ---
|
|
|
|
# how long do we allow *ALL* traffic from an ip address after successful login
|
|
# could be useful if you have a system which does not handle cookies
|
|
#IP_TTL=0 # default disabled, time in seconds
|
|
|
|
# once blocked, do we respond with "I'm a teapot", false to use "Too many requests"
|
|
#TEAPOT=true # default enabled, boolean
|
|
|
|
# --- Styling Options ---
|
|
#TITLE='Pre-Authentication System'
|
|
#BG_COLOR='#029386' # teal
|
|
#FG_COLOR='#ffffff' # white
|
|
#ERROR_COLOR='#ffb16d' # apricot (light orange)
|
|
#ID_NAME='Session ID'
|
|
#TOKEN_NAME='Authentication Token'
|
|
PASSWORD_NAME='Authentication Password'
|
|
#SUBMIT_NAME='Submit'
|
|
#ERROR_MESSAGE='Unsuccessful login attempt'
|
|
# title and message to use on block page, if teapot is true
|
|
#TEAPOT_TITLE="I'm a teapot"
|
|
#TEAPOT_MESSAGE='I refuse to brew coffee'
|
|
# title and message to use on block page, if teapot is false
|
|
#TOO_MANY_TITLE='Too many requests'
|
|
#TOO_MANY_MESSAGE='Try again later'
|
|
|