adding jeremy's suggested default selfservice config