content: # Example verification_server config
  
  # Whether HTTP requests/responses should be logged, default value: false
  log_requests = false
  
  # Emit logs in JSON format, default value: false
  structured_logging = false
  
  # The ephemeral ID secret is used for (rotating) QR code generation, hex
  # encoded, minimally 32 bytes (64 characters)
  ephemeral_id_secret = ""
  
  # Array of CAs with trusted issuers
  issuer_trust_anchors = ["MII..."]
  
  # Array of CAs which sign use case certificates
  reader_trust_anchors = ["MII..."]
  
  # The wallet must be able to reach the server at this URL
  public_url = "http://localhost:8001/"
  
  # The base of the Universal Link (UL) of the wallet, used in QRs/ULs
  # Default value: walletdebuginteraction://wallet.edi.rijksoverheid.nl/
  universal_link_base_url = "walletdebuginteraction://wallet.edi.rijksoverheid.nl/"
  
  # The `client_id` values that this server accepts, identifying the wallet
  # implementation (not individual instances, i.e., the `client_id` value of
  # a wallet implementation is constant across all wallets of that implementation)
  # Default value: https://wallet.edi.rijksoverheid.nl
  wallet_client_ids = ["https://wallet.edi.rijksoverheid.nl"]
  
  # CORS settings. To allow all origins: allow_origins = "*"
  allow_origins = ["http://localhost:8080"]
  
  # Optional, but required if the `requester_server` section is absent
  [requester_server.authentication]
  api_key = "your_secret_key"
  
  # Optional private endpoint for the requester, wallet_server is used if absent
  [requester_server]
  ip = "127.0.0.1"
  port = 8002
  
  # Public endpoint for the wallet, also private if requester_server is absent
  [wallet_server]
  ip = "127.0.0.1"
  port = 8001
  
  # Where to store session state. can be `memory://` or a `postgres://..` url
  # Memory is ephemeral, default value: memory://
  [storage]
  url = "postgres://postgres:postgres@localhost:5432/verification_server"
  
  # Optional, when using an HSM
  [hsm]
  library_path = "/path/to/hsm.so"
  user_pin = "12345678"
  max_sessions = 3
  max_session_lifetime_in_sec = 900
  
  # Use case entries
  # * session_type_return_url: Can be both, same_device (default), or neither
  # * certificate: Base64 encoded DER format certificate
  # * private_key: Base64 encoded DER format private key, or string
  # * private_key_type: Can be hsm or software, when hsm private_key
  #   should contain a string identifying the private key in the HSM
  #
  [usecases.driving_license]
  session_type_return_url = "both"
  certificate = "MII..."
  private_key = "MII..."
  private_key_type = "software"
  
  [usecases.parking_permit]
  session_type_return_url = "same_device"
  certificate = "MII..."
  private_key = "some_private_key"
  private_key_type = "hsm"
  