# Mercureact default configuration file # Please make a copy of me before editing listen: - address: 0.0.0.0:9000 # Setup CORS headers cors: # Access-Control-Allow-Origin allow_origin: '*' # Content-Security-Policy csp: "default-src * 'self' http: 'unsafe-eval' 'unsafe-inline'; connect-src * 'self'" # Setup encryption encryption: cert: foo.pem key: foo.key # Enable websockets websocket: enable: true publish: # Assign a UUID to published messages even if one is already set in the message overwrite_id: false # Reject messages with previously seen IDs reject_duplicates: true subscribe: # Allow anonymous subscription for public updates allow_anonymous: false security: jwt_secret: "!ChangeThisMercureHubJWTSecretKey!"