fix(quickadapter): give ws_token a self-documenting placeholder like jwt_secret_key

Makes the README 'public placeholders that provide no protection until changed'
note accurate for the WebSocket token too; empty and placeholder are equally
inert while the API server is disabled.

diff --git a/quickadapter/user_data/config-template.json b/quickadapter/user_data/config-template.json
index ae7026722de61d906442aba987e49fc726dd5157..70951c2ea735bdccfb122de187bd38c4dd20bbe5 100644 (file)
--- a/quickadapter/user_data/config-template.json
+++ b/quickadapter/user_data/config-template.json
@@ -76,7 +76,7 @@
     "verbosity": "error",
     "enable_openapi": false,
     "jwt_secret_key": "change-me-before-enabling-the-api",
-    "ws_token": "",
+    "ws_token": "change-me-before-enabling-the-api",
     "CORS_origins": [],
     "username": "freqtrader",
     "password": "freqtrader"