security {
    login {
        backoff {
            # Whether to apply exponential login backoff after wrong password attempts.
            enabled=false
            # Initial login backoff in milliseconds.
            initial-ms=1000
            # Maximum login backoff in milliseconds.
            max-ms=30000
            # Multiplier used by login backoff.
            multiplier=2
        }
        lockout {
            # Whether to lock login attempts after repeated failures.
            enabled=false
            # Wrong login attempts threshold before lockout is applied.
            threshold=10
            # Lockout duration in milliseconds after reaching threshold.
            duration-ms=300000
        }
    }
}

# The minimum length of a password. Set to negative to disable.
minimum-password-length=-1

# Sets the maximum amount of accounts that can be registered from the same IP address.
# Set to zero or less to disable.
# !!THIS IS NOT RECOMMENDED!! Due to the lack of IPv4 addresses, sometimes even entire villages share the same IP address.
ip-limit=-1

# Should we enable debug mode? This will print out debug messages to the console.
debug=true