# Container paths. Omit ta to refresh the TA certificate each run.
# TAL files themselves are operator-maintained and are never auto-updated.
config-version = 1
mode = "daemon"
state-root = "/data"
interval-secs = 60
retain-runs = 20
shutdown-grace-secs = 30
# max-runs = 3 # uncomment only for a finite run
run-timeout-secs = 1800
require-complete = true
ta-refresh-policy = "allow-valid-cache"
log-level = "info"
log-format = "text"

[[anchors]]
id = "anchor"
tal = "/input/anchor.tal"
# ta = "/input/anchor.cer" # uncomment to pin a fixed TA certificate