HTTP, !secret, and secrets.yaml

I am using 0.38.4 and getting familiar with breaking up my configuration files. I have several yaml files that work flawlessly except in the case of my “http” component and “ip_ban_enabled”.

No matter what I try I can type my password infinite times incorrectly and it will always let me login with the correct password. Below is my config yaml.


homeassistant:
  name: Valence SH
  latitude: !secret home_latitude
  longitude: !secret home_longitude
  elevation: !secret home_elevation
  unit_system: imperial
  time_zone: America/New_York
  customize: !include customize.yaml
  
frontend:
updater:
discovery:
conversation:
history:
logbook:
sun:
tts:
  platform: google

http:
  api_password: !secret api_password
  ip_ban_enabled: True
  login_attempts_threshold: 5
  
sensor: !include sensors.yaml

Thanks everyone for your help!

Probably fixed in next release: https://github.com/home-assistant/home-assistant/pull/6201