get.pme.sh/pnats@v0.0.0-20240304004023-26bb5a137ed0/test/configs/tls_cert_cn.conf (about)

     1  
     2  listen: localhost:9334
     3  
     4  tls {
     5    cert_file = "./configs/certs/tlsauth/server.pem"
     6    key_file = "./configs/certs/tlsauth/server-key.pem"
     7    ca_file = "./configs/certs/tlsauth/ca.pem"
     8    verify = true
     9    verify_and_map = true
    10  }
    11  
    12  authorization {
    13    # Default permissions
    14    permissions {
    15      publish {
    16        allow = ["public.>"]
    17      }
    18      subscribe {
    19        allow = ["public.>"]
    20      }
    21    }
    22  
    23    users [
    24      { user = "CN=example.com,OU=NATS.io" }
    25      { user = "CN=example.com,OU=CNCF", permissions = {
    26  	publish {
    27  	  allow = [">"]
    28  	}
    29  	subscribe {
    30  	  allow = [">"]
    31  	}
    32        }
    33      }
    34    ]
    35  }