adasd

config/registration.php

@@ -12,6 +12,25 @@ return [
     'approver_usernames' => [],
     'password_crypto_key' => getenv('REGISTRATION_PASSWORD_KEY') ?: '',
     'reset_link_ttl_hours' => 8,
+    'abuse_protection' => [
+        'honeypot_field' => 'website',
+        'rate_limit_storage_path' => 'data/public-form-rate-limit.json',
+        'rules' => [
+            'registration' => [
+                'max_attempts' => 5,
+                'window_seconds' => 900,
+            ],
+            'password_reset' => [
+                'max_attempts' => 5,
+                'window_seconds' => 900,
+            ],
+        ],
+        'turnstile' => [
+            'enabled' => filter_var(getenv('TURNSTILE_ENABLED') ?: 'false', FILTER_VALIDATE_BOOL),
+            'site_key' => getenv('TURNSTILE_SITE_KEY') ?: '',
+            'secret_key' => getenv('TURNSTILE_SECRET_KEY') ?: '',
+        ],
+    ],
     'mail' => [
         'enabled' => true,
         'from_email' => getenv('MAIL_FROM_EMAIL') ?: 'noreply@desktop.kusche.berlin',