{
"AllowedHosts": "*",
"Jwt": {
"SecretKey": "" /*used to sign browser authentication, 32+ digit random string, keep it secret, keep it safe! */
},
"ConnectionStrings": {
"ProcessorContext": "Data Source=config/processor.db",
"UsersContext": "Data Source=config/users.db"
},
"WebRequestLoggingEnabled": false /* set to false unless debugging */
}
While you are at it, probably also need a way to disable login for X minutes after 3 failed login attempts in a row. Maybe a fail2ban feature? Port scanners are relentless nowadays and if they discover an open port leading to a web portal, it will be hit hard.... that's a good point lol mine is hosted on prem so i didn't think about that.
i'll add the ability to turn off registration