Setup: WebSocket, With Credentials

# Enable authentication with username and password.

listen: 0.0.0.0:4222
http_port: 8222

# WebSocket transport — required for the browser to connect at all.
websocket {
  port: 8080
  no_tls: true
}

# JetStream — required for KV buckets and Streams.
jetstream {
  store_dir: "/data"
}

# Accounts + system account — required to receive $SYS.> events.
# JetStream cannot be enabled on the system account, so it lives only in
# APP; SYS exports its $SYS.> events to APP under a "sys." prefix so a
# single connection (user "joes") sees everything.
system_account: SYS

accounts {
  SYS: {
    users: [
      { user: sysuser, password: "adminpassword" }
    ]
    exports: [
      { stream: "$SYS.>", accounts: [APP] }
    ]
  }
  APP: {
    jetstream: enabled
    users: [
      { user: joes, password: "mypassword" }
    ]
    imports: [
      { stream: { account: SYS, subject: "$SYS.>" }, prefix: "sys" }
    ]
  }
}