feat(nubus): Allow configuration of limits for password reset requests via security.passwordResetLimits

This commit is contained in:
Lilly Sell
2025-07-30 17:49:25 +02:00
committed by Thorsten Roßner
parent 5537dbbd7c
commit 09f54b4134
2 changed files with 12 additions and 0 deletions

View File

@@ -113,6 +113,11 @@ global:
token_validity_period: 172800 token_validity_period: 172800
blacklist: blacklist:
groups: __DELETE_KEY__ groups: __DELETE_KEY__
limit:
total:
day: {{ .Values.security.passwordResetLimits.day }}
hour: {{ .Values.security.passwordResetLimits.hour }}
minute: {{ .Values.security.passwordResetLimits.minute }}
ingress: ingress:
annotations: annotations:

View File

@@ -12,4 +12,11 @@ security:
matchLabels: matchLabels:
app.kubernetes.io/name: "ingress-nginx" app.kubernetes.io/name: "ingress-nginx"
namespace: "ingress-nginx" namespace: "ingress-nginx"
# Global limits for how often a password reset action can be requested.
# Defaults are taken from the nubus stack-data-ums chart and should work with most small to medium installations
passwordResetLimits:
day: 1000
hour: 200
minute: 120
... ...