# Public healthcheck: unauthenticated PING only, no key access.
user default reset on nopass -@all +ping

# Runtime cache user: replace the placeholder with a long random password.
user safety reset on >REPLACE_WITH_LONG_RANDOM_PASSWORD ~han:safety:* -@all +ping +get +set

# Metrics user: use the password stored in the REDIS_EXPORTER_PASSWORD JSON map.
user exporter reset on >REPLACE_WITH_EXPORTER_RANDOM_PASSWORD -@all +ping +info