Security Hardening: Proaktive Kontosperren, Fail2Ban-Integration, SecurityLogger, Alerting und API-Schutz

2026-09-08 11:45:04 +02:00
parent 087f4392a9
commit edea46e342
17 changed files with 927 additions and 169 deletions
@@ -62,6 +62,11 @@ return [
        // Bewusst asymmetrisch: geprüft wird auf fremden Systemen, dort darf
        // der Signierschlüssel nicht liegen.
        'release_private_key' => dc_env('DC_RELEASE_SIGNING_KEY', ''),
+        // Proaktive Kontosperren & Brute-Force-Schutz
+        'max_account_attempts'    => (int)dc_env('DC_MAX_ACCOUNT_ATTEMPTS', 5),
+        'account_lockout_minutes' => (int)dc_env('DC_ACCOUNT_LOCKOUT_MINUTES', 15),
+        'max_ip_attempts'         => (int)dc_env('DC_MAX_IP_ATTEMPTS', 10),
+        'use_syslog'              => (bool)dc_env('DC_USE_SYSLOG', false),
    ],
    'bugtracker' => [
        // Projekt-Slug, unter dem das Deploymentcenter eigene Fehler meldet.