#!/bin/sh
# stdin: default config
# stdout: modified config
set -e
cat

# Enforce a delay after a failed login attempt
# - https://wiki.archlinux.org/title/Security#Enforce_a_delay_after_a_failed_login_attempt
echo 'auth optional pam_faildelay.so delay=4000000'