diff --git a/ircd.j2 b/ircd.j2
index 4eb768e..34a461f 100644
--- a/ircd.j2
+++ b/ircd.j2
@@ -261,9 +261,9 @@ general {
 	oper_snomask = "+s";
 	burst_away = yes;
 	nick_delay = 0 seconds; # 15 minutes if you want to enable this
-	reject_ban_time = 1 minute;
-	reject_after_count = 3;
-	reject_duration = 5 minutes;
+	reject_ban_time = 10 minutes;
+	reject_after_count = 2;
+	reject_duration = 60 minutes;
 	throttle_duration = 60;
 	throttle_count = 4;
 	max_ratelimit_tokens = 30;
@@ -271,6 +271,7 @@ general {
 	certfp_method = sha512;
 	hide_opers_in_whois = no;
 	tls_ciphers_oper_only = no;
+	oper_secure_only = yes;
 };
 
 modules {