20260914 强制 TOML 配置并完善 TA 刷新与 daemon

docker/examples/daemon-all5.toml

@@ -0,0 +1,39 @@
+# Container paths. Omit ta to refresh the TA certificate each run.
+# TAL files themselves are operator-maintained and are never auto-updated.
+config-version = 1
+mode = "daemon"
+state-root = "/data"
+interval-secs = 60
+retain-runs = 20
+shutdown-grace-secs = 30
+# max-runs = 3 # uncomment only for a finite run
+run-timeout-secs = 1800
+require-complete = true
+ta-refresh-policy = "allow-valid-cache"
+log-level = "info"
+log-format = "text"
+
+[[anchors]]
+id = "afrinic"
+tal = "/input/afrinic.tal"
+# ta = "/input/afrinic.cer" # uncomment to pin a fixed TA certificate
+
+[[anchors]]
+id = "apnic"
+tal = "/input/apnic.tal"
+# ta = "/input/apnic.cer" # uncomment to pin a fixed TA certificate
+
+[[anchors]]
+id = "arin"
+tal = "/input/arin.tal"
+# ta = "/input/arin.cer" # uncomment to pin a fixed TA certificate
+
+[[anchors]]
+id = "lacnic"
+tal = "/input/lacnic.tal"
+# ta = "/input/lacnic.cer" # uncomment to pin a fixed TA certificate
+
+[[anchors]]
+id = "ripe"
+tal = "/input/ripe.tal"
+# ta = "/input/ripe.cer" # uncomment to pin a fixed TA certificate