Add simple admin brute-force protection #7

Open
opened 2026-06-02 01:56:32 +02:00 by ak · 0 comments
Owner

Add a small KISS-style brute-force protection layer for the login/admin area.

Preferred behaviour:

  • rate-limit by IPv4 /24
  • rate-limit by IPv6 /64
  • do not depend on username
  • use Django cache backend
  • support Valkey/Redis if configured

This is not a security boundary, only a practical reduction of noisy automated login attempts.

Add a small KISS-style brute-force protection layer for the login/admin area. Preferred behaviour: * rate-limit by IPv4 /24 * rate-limit by IPv6 /64 * do not depend on username * use Django cache backend * support Valkey/Redis if configured This is not a security boundary, only a practical reduction of noisy automated login attempts.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
viafier/viafier4#7
No description provided.