diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -2922,7 +2922,7 @@
 keycloak::version: 10.0.2
 
 keycloak::swh_theme::repo_url: https://forge.softwareheritage.org/source/swh-keycloak-theme.git
-keycloak::swh_theme::tag: v0.3.0
+keycloak::swh_theme::tag: v0.3.1
 
 keycloak::vhost::name: auth.softwareheritage.org
 keycloak::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
@@ -2954,6 +2954,7 @@
   smtp_server_host: localhost
   smtp_server_from: noreply@softwareheritage.org
   smtp_server_from_display_name: Software Heritage Authentication Service
+  brute_force_protected: true
 
 keycloak::resources::clients::common_settings:
   public_client: true