listen_addr: "127.0.0.1:8080"
connect_timeout_ms: 10000
upstream_timeout_ms: 30000

acl:
  default_action: deny
  users: {}
  rules:
    - name: localhost
      action: allow
      networks: ["127.0.0.1/32", "::1/128"]

# To require Basic authentication, generate a hash with
# `cargo run -- hash-password`, then configure a user and rule:
#
# acl:
#   default_action: deny
#   users:
#     alice:
#       password_hash: "$hermes-sha256$v=1$..."
#   rules:
#     - name: alice
#       action: allow
#       users: ["alice"]