Skip to content

Configuration Overview

The firewall configuration consists of five main sections:

Section Purpose Required
global Defines global configuration settings No
storage Defines where blocked IP addresses are persisted Yes
plugins Ordered list of plugin entries that allow (response: allow), challenge (response: challenge), or block (response: block) traffic No
challenge Settings for the interstitial flow (provider, HMAC secret, cookie / header names). Required iff any plugin uses response: challenge. See Challenge Response Type. Conditional
logger Monolog handlers for logging firewall events No

Legacy formats bypass: / block: are still accepted and auto-normalized into plugins: entries at load time. See Legacy Config Format. New configs should use the plugins: array.