New user: Does Hestia CP have bruteforce password protection built-in?

Community Support
17

I don’t have one that I’ve tried on Hestia. But you can start pretty simple.

The limit_req_zone bits would go in nginx.conf, and then you’d probably need to create a custom template to hold the limit_req bits.

http {
    #...

    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;

    server {
        #...

        location /search/ {
            limit_req zone=one;
        }
    }
}

A forum member tried it before, but apparently was getting errors.