X-Git-Url: https://git.squeep.com/?a=blobdiff_plain;f=config%2Fdefault.js;h=bbc66fcd2fcf6f4249deeb483136abf630d3ea01;hb=5618c8b62b18564ea4262cd089dcf54af72afc10;hp=1905315cec7a1b69eb0e962513923745ff05db64;hpb=38aba0869dc3ade99d439e74cbc6239b4fa1f632;p=websub-hub diff --git a/config/default.js b/config/default.js index 1905315..bbc66fc 100644 --- a/config/default.js +++ b/config/default.js @@ -9,6 +9,9 @@ const defaultOptions = { // Uniquely identify this instance, used to tag work-in-progress. nodeId: common.requestId(), // Default to ephemeral ID: easiest for clustered deployments. + // This should be set to a reasonably long passphrase or random buffer, to keep client session data secure. + encryptionSecret: undefined, // REQUIRED + // Dingus API Server Framework options. Be sure to set the one REQUIRED option here. dingus: { // This needs to be the full externally accessible root URL, including any proxyPrefix component, which clients will connect to, and which topics will list as their hub link. @@ -44,6 +47,10 @@ const defaultOptions = { manager: { pageTitle: packageName, // title on html pages + footerEntries: [ // common footers on all html pages + 'Development Repository / GitHub mirror', + '©', + ], strictSecrets: false, // If true, reject requests with secrets but not over https publicHub: true, // Accept publish requests as new topics. processImmediately: true, // If true, immediately attempt to process requests when accepted. @@ -65,6 +72,8 @@ const defaultOptions = { authenticator: { basicRealm: packageName, // Realm prompt for login on administration pages secureAuthOnly: true, // Require secure transport for authentication. + authnEnabled: ['argon2', 'pam'], + forbiddenPAMIdentifiers: ['root'], }, worker: {