20260914 强制 TOML 配置并完善 TA 刷新与 daemon

docker/compose.all5-daemon.yaml

@@ -1,3 +1,6 @@
+# Copy docker/examples/daemon-all5.toml and set CONFIG_FILE to its absolute path.
+# Examples use text logs and automatic TA certificate refresh; TALs stay local.
+# See docs/docker.md for graceful stop and config reload.
 services:
   validator:
     build:
@@ -12,62 +15,10 @@ services:
     tmpfs:
       - /tmp
     volumes:
-      - ${INPUT_DIR:?set INPUT_DIR to the TAL/TA directory}:/input:ro
+      - ${CONFIG_FILE:?set CONFIG_FILE to an all-RIR daemon TOML file}:/config/daemon.toml:ro
+      - ${INPUT_DIR:?set INPUT_DIR to the TAL directory (TA certificates optional)}:/input:ro
       - ${DAEMON_DIR:?set DAEMON_DIR to a writable dedicated directory}:/data
-    environment:
-      PANDA_RPKI_LOG_LEVEL: "${PANDA_RPKI_LOG_LEVEL:-info}"
-      PANDA_RPKI_LOG_FORMAT: "${PANDA_RPKI_LOG_FORMAT:-text}"
-      PANDA_RPKI_LOG_PROGRESS_INTERVAL_SECS: "${PANDA_RPKI_LOG_PROGRESS_INTERVAL_SECS:-10}"
     command:
       - daemon
-      - --state-root
-      - /data
-      - --interval-secs
-      - "${PANDA_RPKI_INTERVAL_SECS:-60}"
-      - --retain-runs
-      - "${PANDA_RPKI_RETAIN_RUNS:-10}"
-      - --run-timeout-secs
-      - "${PANDA_RPKI_RUN_TIMEOUT_SECS:-0}"
-      - --shutdown-grace-secs
-      - "${PANDA_RPKI_SHUTDOWN_GRACE_SECS:-30}"
-      - --
-      - --tal
-      - /input/${AFRINIC_TAL_FILE:?set AFRINIC_TAL_FILE}
-      - --ta
-      - /input/${AFRINIC_TA_FILE:?set AFRINIC_TA_FILE}
-      - --tal-id
-      - afrinic
-      - --tal
-      - /input/${APNIC_TAL_FILE:?set APNIC_TAL_FILE}
-      - --ta
-      - /input/${APNIC_TA_FILE:?set APNIC_TA_FILE}
-      - --tal-id
-      - apnic
-      - --tal
-      - /input/${ARIN_TAL_FILE:?set ARIN_TAL_FILE}
-      - --ta
-      - /input/${ARIN_TA_FILE:?set ARIN_TA_FILE}
-      - --tal-id
-      - arin
-      - --tal
-      - /input/${LACNIC_TAL_FILE:?set LACNIC_TAL_FILE}
-      - --ta
-      - /input/${LACNIC_TA_FILE:?set LACNIC_TA_FILE}
-      - --tal-id
-      - lacnic
-      - --tal
-      - /input/${RIPE_TAL_FILE:?set RIPE_TAL_FILE}
-      - --ta
-      - /input/${RIPE_TA_FILE:?set RIPE_TA_FILE}
-      - --tal-id
-      - ripe
-      - --parallel-phase2-object-workers
-      - "${PANDA_RPKI_WORKERS:-8}"
-      - --parallel-max-repo-sync-workers-global
-      - "${PANDA_RPKI_REPO_WORKERS:-8}"
-      - --parallel-phase2-worker-queue-capacity
-      - "${PANDA_RPKI_WORKER_QUEUE_CAPACITY:-256}"
-      - --parallel-repo-worker-queue-capacity
-      - "${PANDA_RPKI_REPO_QUEUE_CAPACITY:-256}"
-      - --http-timeout-secs
-      - "${PANDA_RPKI_HTTP_TIMEOUT_SECS:-600}"
+      - --config
+      - /config/daemon.toml