UniqueSoft/openpanel
2
0
Fork 0
mirror of https://github.com/stefanpejcic/openpanel synced 2025-06-26 18:28:26 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update 000_intro.md

Browse Source
This commit is contained in:
Stefan Pejcic 2024-11-01 14:21:46 +01:00 committed by GitHub
parent 5d8b58c143
commit f1d35d5127
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
website/docs/admin/000_intro.md
View File

@ -261,15 +261,30 @@ To restrict OpenAdmin access to your team, whitelist your server's IP addresses
As an additional security measure, HTTP Basic Authentication can be enabled for the admin panel. As an additional security measure, HTTP Basic Authentication can be enabled for the admin panel.
### Brute-Force Protection ### Brute-Force Protection
OpenAdmin includes built-in [rate limiting](https://i.postimg.cc/VfgmKCvx/ratelimiting.png) and [IP blocking](https://i.postimg.cc/053g4dsB/2024-11-01-12-25.png) to protect against brute-force attacks. You can configure the maximum number of failed login attempts allowed per IP (default is `5`) and the total number of failed attempts (default is `20`), after which the offending IP will be temporarily blocked by the firewall for one hour.
Limits are configurable in: `/etc/openpanel/openadmin/config/admin.ini` file: Both user and admin interfaces have a built-in rate limiting and IP address blocking to protect against brute-force attacks. You can configure the maximum number of failed login attempts allowed per IP (default is `5`) and the total number of failed attempts (default is `20`), after which the offending IP will be temporarily blocked by the firewall for one hour.
For user panel imits are configurable in: `/etc/openpanel/openpanel/conf/openpanel.config` file:
```bash
[USERS]
login_ratelimit=5
login_blocklimit=20
```
![user ratelimit](/img/panel/v1/user_block.png)
For admin panel imits are configurable in: `/etc/openpanel/openadmin/config/admin.ini` file:
```bash ```bash
[PANEL] [PANEL]
login_ratelimit=5 login_ratelimit=5
login_blocklimit=20 login_blocklimit=20
``` ```
![admin ratelimit](/img/admin/admin_block.png)
If a user successfully logs in, the counter for `login_blocklimit` will reset.
Failed login attempts and blocked IP addresses are logged in the `/var/log/openpanel/admin/failed_login.log` file for OpenAdmin and in the `/var/log/openpanel/user/failed_login.log` file for OpenPanel.
### IP blocking per domain ### IP blocking per domain
Users can block IP addresses per domain name. Users can block IP addresses per domain name.