Varbase Security Base

The Varbase Security Base recipe provides a hardened security configuration for Varbase sites, including password policies, spam prevention, login protection, and security headers.

Drupal.org Project

https://www.drupal.org/project/varbase_security_base

Included Modules

Brings in the following core and contributed modules to your site:

Module	Purpose
CAPTCHA	Provides the CAPTCHA API for adding challenges to arbitrary forms.
reCAPTCHA	Protect your website from spam and abuse while letting real people pass through with ease.
Honeypot	Mitigates spam form submissions using the honeypot method.
Antibot	Prevent forms from being submitted without JavaScript enabled.
Password Policy	Sets up constraints and expiration of passwords.
Password Character Types Policy	Minimum number of different character types the password must contain.
Password Characters of Type Policy	Minimum characters of a particular type the password must contain.
Password Policy History	Sets up a password constraint to limit repeated use of the same password.
Password Character Length Policy	Sets up a character length constraint for passwords.
Password Username Policy	Restrict users from having their username in their password.
Security Kit	Enhance security of your Drupal website.
Username Enumeration Prevention	Removes the error message produced by the forgot password form, when an invalid user has been supplied.
Flood control	Allows configuring hidden flood control options and unblocking IP addresses and user ID's that are blocked after multiple failed login attempts.

Installation

Apply the recipe using Drush:

ddev drush recipe ../recipes/varbase_security_base

This recipe is automatically applied when using the Varbase Starter recipe.