Configuration Overview¶
The firewall configuration consists of five main sections:
| Section | Purpose | Required |
|---|---|---|
global | Defines global configuration settings | No |
storage | Defines where blocked IP addresses are persisted | Yes |
plugins | Ordered list of plugin entries that allow (response: allow), challenge (response: challenge), or block (response: block) traffic | No |
challenge | Settings for the interstitial flow (provider, HMAC secret, cookie / header names). Required iff any plugin uses response: challenge. See Challenge Response Type. | Conditional |
logger | Monolog handlers for logging firewall events | No |
Legacy formats
bypass:/block:are still accepted and auto-normalized intoplugins:entries at load time. See Legacy Config Format. New configs should use theplugins:array.