Mark Gregory
7fb71c4d24
* Security policy management * Minimum password-length policy * Mixed-case, number, and symbol requirements * Password expiry and history settings * MFA requirement policy * Failed-login and lockout settings * Session idle-time policy * Single-session policy * Automatic successful-login recording * Automatic failed-login recording * Automatic logout recording * Authentication history * IP allow and deny rules * IPv4 CIDR support * Administration and login rule scopes * Trusted-device storage and revocation * Security middleware registration * Administration navigation * Security permissions * Module registration and tests
9 lines
400 B
PHP
9 lines
400 B
PHP
<?php
|
|
return [
|
|
'record_authentication_events' => (bool) env('SECURITY_RECORD_AUTH_EVENTS', true),
|
|
'trusted_device_days' => (int) env('SECURITY_TRUSTED_DEVICE_DAYS', 30),
|
|
'session_idle_minutes' => (int) env('SECURITY_SESSION_IDLE_MINUTES', 120),
|
|
'max_failed_logins' => (int) env('SECURITY_MAX_FAILED_LOGINS', 10),
|
|
'lockout_minutes' => (int) env('SECURITY_LOCKOUT_MINUTES', 15),
|
|
];
|