Make websocket transport secure by default

2026-02-28 03:52:05 -05:00
parent 46fd9fe46f
commit cf54132c25
6 changed files with 14 additions and 7 deletions
--- a/server/app/config.py
+++ b/server/app/config.py
@@ -19,7 +19,7 @@ class NetworkConfigSection(BaseModel):
    """Network transport and safety limits."""

    max_message_bytes: int = Field(default=2_000_000, gt=0)
-    allow_insecure_ws: bool = True
+    allow_insecure_ws: bool = False


 class TlsConfigSection(BaseModel):