jwtproxy:
  signer_proxy:
    enabled: false
  verifier_proxy:
    enabled: true
    listen_addr: unix:/tmp/jwtproxy_secscan.sock
    verifier:
      upstream: unix:/tmp/gunicorn_web.sock 
      audience: {{ audience }}
      key_server:
        type: keyregistry
        options:
          registry: {{ registry }}