It starts with anyone-can-connect=true in the blockchain parameters, probably also anyone-can-send/receive=true as well. Beyond that you need to think about your block validation (mining) model – either permissioned mining, or proof-of-work mining, and set the parameters accordingly.