From 63c495bf215b4ad188c6761e0c8d35fcadde2604 Mon Sep 17 00:00:00 2001 From: Josh Date: Fri, 5 Apr 2024 18:22:05 -0400 Subject: [PATCH] docs(admin): Fix brute force disabling command Signed-off-by: Josh --- admin_manual/configuration_server/bruteforce_configuration.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/configuration_server/bruteforce_configuration.rst b/admin_manual/configuration_server/bruteforce_configuration.rst index 5b2c8fb7d..517c9e38a 100644 --- a/admin_manual/configuration_server/bruteforce_configuration.rst +++ b/admin_manual/configuration_server/bruteforce_configuration.rst @@ -96,7 +96,7 @@ additional monitoring or behavior adjustments related to brute force protection. .. danger:: - You would need to adjust the parameter ``auth-bruteforce-protection-enabled`` in your Nextcloud ``config.php`` to + You would need to adjust the parameter ``auth.bruteforce.protection.enabled`` in your Nextcloud ``config.php`` to disable brute force protection, which is **heavily discouraged for production servers**, particularly if your server is reachable via a public IP address. It allows an attacker to iterate over all users and their passwords as well as two-factor verifications afterwards ultimately leading to admin access.