--- _sg_meta: type: config config_version: 2 sg_config: dynamic: http: anonymous_auth_enabled: false xff: enabled: true internalProxies: .+ remoteIpHeader: x-forwarded-for authc: basic_internal_auth_domain: http_enabled: true transport_enabled: true order: 0 http_authenticator: type: basic challenge: false authentication_backend: type: internal proxy_auth_domain: http_enabled: false transport_enabled: false order: 1 http_authenticator: type: proxy challenge: false config: user_header: x-proxy-user roles_header: x-proxy-roles authentication_backend: type: noop clientcert_auth_domain: http_enabled: false transport_enabled: false order: 2 http_authenticator: challenge: false type: clientcert config: username_attribute: cn authentication_backend: type: noop