---
jwtproxy:
  signer_proxy:
    enabled: false
  verifier_proxies:
  - listen_addr: ":8080"
    verifier:
      audience: "workspace123"
      auth_cookies_enabled: false
      claims_verifiers:
      - options:
          iss: "wsmaster"
        type: "static"
      cookie_path: "/"
      key_server:
        options:
          issuer: "wsmaster"
          key_id: "workspace123"
          public_key_path: "/che-jwtproxy-config/mykey.pub"
        type: "preshared"
      max_skew: "1m"
      max_ttl: "1m"
      nonce_storage:
        type: "void"
      public_base_path: "/there"
      upstream: "http://tomcat:8080"
  - listen_addr: ":4101"
    verifier:
      audience: "workspace123"
      auth_cookies_enabled: true
      auth_redirect_url: "http://che-host.com/app/loader.html"
      claims_verifiers:
      - options:
          iss: "wsmaster"
        type: "static"
      cookie_path: "/cookies"
      excludes:
      - "/api/liveness"
      - "/other/exclude"
      key_server:
        options:
          issuer: "wsmaster"
          key_id: "workspace123"
          public_key_path: "/che-jwtproxy-config/mykey.pub"
        type: "preshared"
      max_skew: "1m"
      max_ttl: "1m"
      nonce_storage:
        type: "void"
      public_base_path: "/here"
      upstream: "ws://terminal:4101"

