docs(ws-bridged): example-yaml entspricht jetzt dem Parser-Schema

packaging/linux/configs/ws-bridged.yaml.example

@@ -1,35 +1,48 @@
 # /etc/zerodds/ws-bridged.yaml.example
 # Default configuration for zerodds-ws-bridged.
-# Spec: zerodds-ws-bridge-1.0 §4 (config schema), §11 (deployment).
+# Spec: zerodds-ws-bridge-1.0 §3 (config schema), §11 (deployment).
+#
+# Parser-Source-of-Truth: crates/websocket-bridge/src/daemon/config.rs::load_from_str.
+# Unbekannte top-level Keys werden stillschweigend ignoriert — Tippfehler
+# fallen also nicht durch Validation-Errors auf.
 
-participant:
-  domain_id: 0
-  qos_profile: builtin/reliable_keep_last_10
+listen: "0.0.0.0:8080"
+domain: 0
+log_level: info
 
-websocket:
-  bind: "0.0.0.0:8080"
-  tls:
-    enabled: false
-    cert: /etc/zerodds/certs/ws-bridged.crt
-    key:  /etc/zerodds/certs/ws-bridged.key
-  origin_allowlist:
-    - "https://zerodds.local"
-  max_message_bytes: 1048576       # 1 MiB DoS-Cap
-  ping_interval_secs: 30
-  pong_timeout_secs: 10
+tls:
+  enabled: false
+  cert_file: "/etc/zerodds/certs/ws-bridged.crt"
+  key_file:  "/etc/zerodds/certs/ws-bridged.key"
+  # client_ca_file: "/etc/zerodds/certs/clients-ca.pem"  # für mTLS
 
-routes:
-  # DDS-Topic <-> WS-URL Mapping. Cross-Ref: zerodds-ws-bridge-1.0 §5.
-  - dds_topic: "ChatMessage"
-    type:      "demo::Chat::Message"
-    ws_path:   "/chat"
-    direction: "bidirectional"
+# Auth-Modi: none | bearer | jwt | mtls | sasl  (Spec §7.2).
+# `bearer` ist single-subject — alle Connections mit korrektem Token
+# laufen als `bearer_subject`. Für Multi-User → `jwt`.
+auth:
+  mode: "none"
+  # bearer_token: "${WS_BRIDGE_TOKEN}"   # ENV-Substitution wird vor Parse expandiert
+  # bearer_subject: "service-account"
 
-logging:
-  level: info
-  format: json
-  destination: journal     # journal | file:/var/log/zerodds/ws-bridged.log
+# Topic-ACL (Spec §7.3). Bei auth_mode != none Pflicht für alle Topics,
+# sonst werden Connections mit "acl reject" abgelehnt.
+# acl:
+#   Chat::Message:
+#     read: "service-account, alice"   # CSV-Liste der erlaubten Subjects
+#     write: "service-account"
 
-observability:
-  metrics_bind: "127.0.0.1:9091"
-  otlp_endpoint: ""        # leer = OTLP disabled, sonst http://otel:4318
+metrics:
+  enabled: false
+  address: "127.0.0.1:9091"   # /metrics + /catalog + /healthz
+
+topics:
+  # DDS-Topic ↔ WS-URL Mapping. Cross-Ref: zerodds-ws-bridge-1.0 §5.
+  - name: "Chat::Message"
+    type: "Chat::Message"        # Default = name wenn nicht gesetzt
+    direction: "bidir"           # in | out | bidir
+    ws_path: "/chat"             # Default = /topics/<slug-of-name>
+    qos:
+      reliability: "reliable"
+      durability: "volatile"
+      history:
+        depth: 10