fix: Add secure default config (#18357)

* fix: Add secure default config. #16188

* Enable frontend by default

.gitignore

@@ -80,6 +80,7 @@ data/extension
 
 # Ignore config
 data/*.yaml
+!data/configuration.example.yaml
 
 # commit-user-lookup.json
 scripts/commit-user-lookup.json

data/configuration.example.yaml

@@ -0,0 +1,25 @@
+# Home Assistant integration (MQTT discovery)
+homeassistant: false
+
+# Enable the frontend, runs on port 8080 by default
+frontend: true
+
+# MQTT settings
+mqtt:
+  # MQTT base topic for zigbee2mqtt MQTT messages
+  base_topic: zigbee2mqtt
+  # MQTT server URL
+  server: 'mqtt://localhost'
+  # MQTT server authentication, uncomment if required:
+  # user: my_user
+  # password: my_password
+
+# Serial settings
+serial:
+  # Location of CC2531 USB sniffer
+  port: /dev/ttyACM0
+
+# Advanced settings
+advanced:
+  # Let Zigbee2MQTT generate a network key on first start
+  network_key: GENERATE

docker/docker-entrypoint.sh

@@ -11,7 +11,7 @@ echo "Using '$DATA' as data directory"
 
 if [ ! -f "$DATA/configuration.yaml" ]; then
     echo "Creating configuration file..."
-    cp /app/configuration.yaml "$DATA/configuration.yaml"
+    cp /app/configuration.example.yaml "$DATA/configuration.yaml"
 fi
 
 exec "$@"