* NEW [conf] add acl config to `nanomq.conf`;
@@ -86,6 +86,41 @@ keepalive_backoff=1250
## Value: true | false
allow_anonymous=true
+## Allow or deny if no ACL rules matched.
+##
+## Value: allow | deny
+acl_nomatch=allow
+
+## Default ACL File.
+##
+## Value: File Name
+acl_file=/etc/nanomq_acl.conf
+
+## Whether to enable ACL cache.
+##
+## If enabled, ACLs roles for each client will be cached in the memory
+##
+## Value: on | off
+enable_acl_cache=on
+
+## The maximum count of ACL entries can be cached for a client.
+##
+## Value: Integer greater than 0
+## Default: 32
+acl_cache_max_size=32
+
+## The time after which an ACL cache entry will be deleted
+##
+## Value: Duration
+## Default: 1 minute
+acl_cache_ttl=1m
+
+## The action when acl check reject current operation
+##
+## Value: ignore | disconnect
+## Default: ignore
+acl_deny_action=ignore
+
## -------------------- SQLite Config -------------------- ##
