trusted-server/trusted-server.example.toml at main · IABTechLab/trusted-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
[[handlers]]
path = "^/_ts/admin"
username = "admin"
password = "replace-with-admin-password-32-bytes"

[publisher]
domain = "example.com"
cookie_domain = ".example.com"
origin_url = "https://origin.example.com"
# Optional: override outbound Host header while connecting to origin_url.
# origin_host_header_override = "www.example.com"
proxy_secret = "change-me-proxy-secret"

[ec]
passphrase = "trusted-server-placeholder-secret"
ec_store = "ec_identity_store"
pull_sync_concurrency = 3
# cluster_trust_threshold = 10
# cluster_recheck_secs = 3600

# Example partner configuration. Replace the token before validating/pushing.
# [[ec.partners]]
# name = "Example Partner"
# source_domain = "partner.example.com"
# OpenRTB agent type; vendor-specific values are supported (PAIR uses 571187).
# openrtb_atype = 3
# bidstream_enabled = true
# api_token = "replace-with-partner-api-token-32-bytes-minimum"
# batch_rate_limit = 60
# pull_sync_enabled = false

# Custom headers to include in every response.
# [response_headers]
# X-Robots-Tag = "noindex"

[request_signing]
enabled = false
config_store_id = "app_config"
secret_store_id = "secrets"

[integrations.prebid]
enabled = false
server_url = "https://prebid.example.com/openrtb2/auction"
timeout_ms = 1000
bidders = []
debug = false
client_side_bidders = []
# Runtime bundle metadata. Set these after running `ts prebid bundle` and uploading the bundle.
# external_bundle_url = "https://assets.example.com/prebid/trusted-prebid-<sha256>.js"
# external_bundle_sha256 = "<manifest sha256>"
# external_bundle_sri = "<manifest sri>"

[integrations.prebid.bundle]
adapters = ["rubicon"]
# user_id_modules = ["sharedIdSystem"]

[integrations.nextjs]
enabled = false
rewrite_attributes = ["href", "link", "siteBaseUrl", "siteProductionDomain", "url"]
max_combined_payload_bytes = 10485760

[integrations.testlight]
enabled = false
endpoint = "https://testlight.example.com/openrtb2/auction"
timeout_ms = 1200
rewrite_scripts = true

[integrations.didomi]
enabled = false
sdk_origin = "https://sdk.example.com"
api_origin = "https://api.example.com"

[integrations.sourcepoint]
enabled = false
rewrite_sdk = true
cdn_origin = "https://cdn.example.com"
cache_ttl_seconds = 3600

[integrations.permutive]
enabled = false
organization_id = ""
workspace_id = ""
project_id = ""
api_endpoint = "https://api.example.com"
secure_signals_endpoint = "https://secure-signals.example.com"

[integrations.lockr]
enabled = false
app_id = ""
api_endpoint = "https://identity.example.com"
sdk_url = "https://identity.example.com/trusted-server.js"
cache_ttl_seconds = 3600
rewrite_sdk = true

[integrations.datadome]
enabled = false
sdk_origin = "https://sdk.example.com"
api_origin = "https://api.example.com"
cache_ttl_seconds = 3600
rewrite_sdk = true

[integrations.gpt]
enabled = false
script_url = "https://ads.example.com/gpt.js"
cache_ttl_seconds = 3600
rewrite_script = true

[proxy]
# certificate_check = true
# Required for integrations.prebid.external_bundle_url and first-party proxy redirects.
# allowed_domains = ["ads.example.com", "assets.example.com", "*.cdn.example.com"]

[auction]
enabled = false
providers = []
timeout_ms = 2000
allowed_context_keys = []

[integrations.aps]
enabled = false
pub_id = "your-aps-publisher-id"
endpoint = "https://aps.example.com/e/dtb/bid"
timeout_ms = 1000

[integrations.google_tag_manager]
enabled = false
container_id = "GTM-EXAMPLE"
upstream_url = "https://tags.example.com"

[integrations.adserver_mock]
enabled = false
endpoint = "https://adserver.example.com/mediate"
timeout_ms = 1000

[integrations.adserver_mock.context_query_params]
example_segments = "segments"

[debug]
ja4_endpoint_enabled = false

# Inject a `<!-- ts-debug: ... -->` HTML comment before `</body>` dumping a
# redacted per-provider auction result: pipeline stats plus every provider
# response, with each bid's creative previewed (not the full markup) and
# provider metadata filtered to a fail-closed allowlist.
# Visible in page source and injects (bounded) raw HTML from SSPs. NEVER enable
# in production.
auction_html_comment = false

[creative_opportunities]
gam_network_id = "123456789"
# FCP is not affected by this value — body content above </body> has already
# streamed and painted before the hold begins. What this caps is the slip on
# DOMContentLoaded and window.load. Worst case: a cache-hit page where origin
# drains in <50 ms but the auction runs to the limit. 500 ms is the recommended
# default; raise only if your SSPs need more headroom and your analytics confirm
# the DCL slip is acceptable.
auction_timeout_ms = 500  # override via TRUSTED_SERVER__CREATIVE_OPPORTUNITIES__AUCTION_TIMEOUT_MS
price_granularity = "dense"

# No slot templates are enabled in the checked-in default config. Add
# `[[creative_opportunities.slot]]` entries via private config or override the
# entire array via:
# TRUSTED_SERVER__CREATIVE_OPPORTUNITIES__SLOT='[{"id":"...","gam_unit_path":"...",...}]'