fix(reforcexy): give jwt_secret_key and ws_token self-documenting placeholders

Match the QuickAdapter template: empty and placeholder are equally inert while
the API server is disabled, but the placeholder signals it must be replaced
before enabling the API.

diff --git a/ReforceXY/user_data/config-template.json b/ReforceXY/user_data/config-template.json
index 7bdee82a7bee1a9cc23f258451bfcf93a4abdba7..c96b0a75ef4ad69d2e1ca292fd9c185fff28ae73 100644 (file)
--- a/ReforceXY/user_data/config-template.json
+++ b/ReforceXY/user_data/config-template.json
@@ -100,8 +100,8 @@
     "listen_port": 8080,
     "verbosity": "error",
     "enable_openapi": false,
-    "jwt_secret_key": "",
-    "ws_token": "",
+    "jwt_secret_key": "change-me-before-enabling-the-api",
+    "ws_token": "change-me-before-enabling-the-api",
     "CORS_origins": [],
     "username": "freqtrader",
     "password": "freqtrader"