Security Settings

Configure security features and best practices.

Security Overview

TLS/SSL

server:
  tls:
    enabled: true
    cert_file: /path/to/cert.pem
    key_file: /path/to/key.pem
    min_version: TLS1.3

JWT Configuration

auth:
  jwt:
    secret: your-256-bit-secret
    expiry: 24h
    refresh_expiry: 7d

Rate Limiting

rate_limit:
  enabled: true
  requests_per_minute: 100
  burst: 20

Audit Logging

audit:
  enabled: true
  log_file: /var/log/fabconnect/audit.log
  events:
    - login
    - logout
    - equipment.connect
    - equipment.disconnect
    - settings.change

Best Practices

1. Use strong passwords (min 12 characters)

2. Enable TLS for all connections

3. Rotate JWT secrets regularly

4. Review audit logs periodically

5. Use principle of least privilege