3.6.0

backend/.env_template

@@ -37,6 +37,19 @@ AUDIT_TTL=1
 # default: ["Authorization"]
 TOKEN_HEADERS=["Authorization"]
 
+# Block user after a few invalid login attempts functionality
+# works only if set to "true"
+# default: true
+BLOCK_USER_AFTER_INVALID_PASS=true
+
+# Number of times a user would need to use invalid password to block the account
+# default: 3
+BLOCK_USER_AFTER_INVALID_PASS_ATTEMPTS_COUNT=3
+
+# How long the account would be blocked in seconds
+# default: 900
+BLOCK_USER_AFTER_INVALID_PASS_TIMEOUT_SECONDS=900
+
 # SSL key path
 # path to the ssl key
 #SSL_KEY_PATH=tower_key.pem