---
title: storage-publiclink
date: 2026-01-23T13:37:38.466093882+01:00
weight: 20
geekdocRepo: https://github.com/owncloud/ocis
geekdocEditPath: edit/master/services/storage-publiclink
geekdocFilePath: README.md
geekdocCollapseSection: true
---

<!-- Do not edit this file, it is autogenerated. Edit the service README.md instead -->

## Abstract



## Table of Contents

* [Brute Force Protection](#brute-force-protection)
* [Example Yaml Config](#example-yaml-config)

## Brute Force Protection

The brute force protection will prevent access to public links if wrong passwords are entered. The implementation is very similar to a rate limiter, but taking into account only wrong password attempts.

By default, you're allowed a maximum of 5 failed attempts in 1 hour:

* `STORAGE_PUBLICLINK_BRUTEFORCE_MAXATTEMPTS=5`
* `STORAGE_PUBLICLINK_BRUTEFORCE_TIMEGAP=1h`

You can adjust those values to your liking in order to define the failure rate threshold (5 failures per hour, by default).

If the failure rate threshold is exceeded, the public link will be blocked until such rate goes below the threshold. This means that it will remain blocked for an undefined time: a couple of seconds in the best case, or up to `STORAGE_PUBLICLINK_BRUTEFORCE_TIME` in the worst case.

If the public link is blocked by the brute force protection, it will be blocked for all the users.

As said, this feature is enabled by default, with a 5 failures per hour rate. If you want to disable this feature, set the related configuration values to 0.
## Example Yaml Config
{{< include file="services/_includes/storage-publiclink-config-example.yaml"  language="yaml" >}}

{{< include file="services/_includes/storage-publiclink_configvars.md" >}}

