<?xml version="1.0"?>
<info>
	<id>bruteforcesettings</id>
	<name>Brute-force settings</name>
	<summary>Whitelist IPs</summary>
	<description><![CDATA[Brute Force Protection is meant to protect Nextcloud servers from attempts to
guess user passwords in various ways. Besides the obvious "*let's try a big
list of commonly used passwords*" attack, it also makes it harder to use
slightly more sophisticated attacks via the reset password form or trying to
find app password tokens.

If triggered, brute force protection makes requests coming from an IP on a
bruteforce protected controller with the same API slower for a 24 hour period.

With this app, the admin can exempt an IP address or range from this
protection which can be useful for testing purposes or when there are false
positives due to a lot of users on one IP address.]]></description>
	<version>2.0.1</version>
	<licence>agpl</licence>
	<author>Roeland Jago Douma</author>
	<namespace>BruteForceSettings</namespace>
	<category>security</category>
	<website>https://github.com/nextcloud/bruteforcesettings</website>
	<bugs>https://github.com/nextcloud/bruteforcesettings/issues</bugs>
	<repository type="git">https://github.com/nextcloud/bruteforcesettings.git</repository>
	<screenshot>https://raw.githubusercontent.com/nextcloud/bruteforcesettings/master/screenshots/1.png</screenshot>
	<dependencies>
		<nextcloud min-version="18" max-version="20" />
	</dependencies>
	<settings>
		<admin>OCA\BruteForceSettings\Settings\IPWhitelist</admin>
	</settings>
</info>