X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=config%2Fdefault.js;fp=config%2Fdefault.js;h=3714253ee999c99e627f030503ec928d5392732d;hb=d0444b4b0ee8166d911e6b227218d110eb7eddf1;hp=64f45eca22399ba7b44ebae0f586a7306e078650;hpb=728dc0686aa5282e7fc9473c92fbbc617a2b93d7;p=websub-hub

diff --git a/config/default.js b/config/default.js
index 64f45ec..3714253 100644
--- a/config/default.js
+++ b/config/default.js
@@ -9,6 +9,9 @@ const defaultOptions = {
   // Uniquely identify this instance, used to tag work-in-progress.
   nodeId: common.requestId(), // Default to ephemeral ID: easiest for clustered deployments.
 
+  // This should be set to a reasonably long passphrase or random buffer, to keep client session data secure.
+  encryptionSecret: undefined, // REQUIRED
+
   // Dingus API Server Framework options. Be sure to set the one REQUIRED option here.
   dingus: {
     // This needs to be the full externally accessible root URL, including any proxyPrefix component, which clients will connect to, and which topics will list as their hub link.
@@ -69,6 +72,8 @@ const defaultOptions = {
   authenticator: {
     basicRealm: packageName, // Realm prompt for login on administration pages
     secureAuthOnly: true, // Require secure transport for authentication.
+    authnEnabled: ['argon2', 'pam'],
+    forbiddenPAMIdentifiers: ['root'],
   },
 
   worker: {