unknown option passwordrequirements

[santitoslp]

I am trying to force 2fa for my users. I edited my config.json file with "PasswordRequirements" option.
Restarted the server and when I go to "My Server" i get the message ADVERTENCIA: Opción de configuración desconocida "passwordrequirements" (unknown configuration option).
What am I doing wrong?

[santitoslp]

I was uing PasswordRequirements as level 1. When I moved it into domains section it worked

[si458]

MeshCentral/meshcentral-config-schema.json

Lines 453 to 480 in aa58afc

	"passwordRequirements": {
	"type": "object",
	"properties": {
	"min": { "type": "integer", "description": "Minimum number of characters allowed for the account password." },
	"max": { "type": "integer", "description": "Maximum number of characters allowed for the account password." },
	"upper": { "type": "integer", "description": "Minimum number of upper case characters required in the password." },
	"lower": { "type": "integer", "description": "Minimum number of lower case characters required in the password." },
	"numeric": { "type": "integer", "description": "Minimum number of numeric characters required in the password." },
	"nonalpha": { "type": "integer", "description": "Minimum number of non-alpha-numeric characters required in the password." },
	"reset": { "type": "integer", "description": "Number of days after which the user is required to change the account password." },
	"email2factor": { "type": "boolean", "default": true, "description": "Set to false to disable email 2FA." },
	"sms2factor": { "type": "boolean", "default": true, "description": "Set to false to disable SMS 2FA." },
	"push2factor": { "type": "boolean", "default": true, "description": "Set to false to disable push notification 2FA." },
	"otp2factor": { "type": "boolean", "default": true, "description": "Set to false to disable one-time-password 2FA." },
	"backupcode2factor": { "type": "boolean", "default": true, "description": "Set to false to disable 2FA backup codes." },
	"single2factorWarning": { "type": "boolean", "default": true, "description": "Set to false to disable single 2FA warning." },
	"lock2factor": { "type": "boolean", "default": false, "description": "When set to true, prevents any changes to 2FA." },
	"force2factor": { "type": "boolean", "default": false, "description": "Requires that all accounts setup 2FA." },
	"skip2factor": { "type": "string", "description": "IP addresses where 2FA login is skipped, for example: 127.0.0.1,192.168.2.0/24" },
	"oldPasswordBan": { "type": "integer", "description": "Number of old passwords the server should remember and not allow the user to switch back to." },
	"banCommonPasswords": { "type": "boolean", "default": false, "description": "Uses WildLeek to block use of the 10000 most commonly used passwords." },
	"loginTokens": { "type": [ "boolean", "array" ], "default": true, "description": "Allows users to create alternative username/passwords for their account. Set to false to disallow all users, or set to a userid array to only all some users." },
	"twoFactorTimeout": { "type": "integer", "default": 300, "description": "Maximum about of time the to wait for a 2FA token on the login page in seconds." },
	"autofido2fa": { "type": "boolean", "default": false, "description": "If true and user account has FIDO key setup, 2FA login screen will automatically request FIDO 2FA." },
	"maxfidokeys": { "type": "integer", "default": null, "description": "Maximum number of FIDO/YubikeyOTP hardware 2FA keys that can be setup in a user account." },
	"allowaccountreset": { "type": "boolean", "default": true, "description": "If set to false, the account reset option on the login screen will not be available to users." }
	}
	},

PasswordRequirements should be passwordRequirements,
it should also be an object
it should also be placed inside you domains object

EXAMPLE:

"domains": {
  "": {
    "passwordRequirements": {
      "min": 10,
      "max": 20
    }
  }
}