Small query before opening up my Radicale instance to the public

[ghost]

Hi Team,

First, thank you for this wonderful project. I have tested it and it works really well with DAVx5 and jtx application.

I have a small query. Currently my instance auth is done via IMAP to my personal email server. The mailserver has fail2ban configured. I am worried about potential brute force attacks that could happen on the radicale WebUI, this could in-turn lock out actual user in the mailserver if an attacker guesses an existing email address.

Any suggestions / tips on how to make it more resilient to bruteforce attacks.

Thank you!

[ghost]

My bad, for some reason I missed out #1800

Closing this one out.