ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=user_group
# The group must be customized of course
eapol_version=1
# 0: The interface driver takes care of scanning the network and selecting the AP.
# This mode should be used if a wired network is to be encrypted.
# 1: wpa_supplicant takes care of scanning the network and selecting APs.
# 2: Almost like 0, but it connects to APs using security policy and SSID (BSSID is not supported).
#
# Normally either mode 1 or mode 2 works.
ap_scan=1

Translated with www.DeepL.com/Translator (free version)