# Container paths. Omit ta to refresh the TA certificate each run.
# TAL files themselves are operator-maintained and are never auto-updated.
config-version = 1
mode = "validate"
out = "/output"
rrdp-state-dir = "/state/repository"
ccr-out = "/output/result.ccr"
run-timeout-secs = 1800
require-complete = true
ta-refresh-policy = "allow-valid-cache"
# Notification/TA requests use http-timeout; RRDP data bodies have independent
# per-resource limits and are selected automatically within the same run.
http-timeout-secs = 10
rrdp-snapshot-timeout-secs = 600
rrdp-delta-timeout-secs = 180
# Set false to ignore all constraints files, including adjacent auto-discovery.
ta-constraints-enabled = true
log-level = "info"
log-format = "text"

[[anchors]]
id = "afrinic"
tal = "/input/afrinic.tal"
constraints = "/input/afrinic.constraints"
# ta = "/input/afrinic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "apnic"
tal = "/input/apnic.tal"
constraints = "/input/apnic.constraints"
# ta = "/input/apnic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "arin"
tal = "/input/arin.tal"
constraints = "/input/arin.constraints"
# ta = "/input/arin.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "lacnic"
tal = "/input/lacnic.tal"
constraints = "/input/lacnic.constraints"
# ta = "/input/lacnic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "ripe"
tal = "/input/ripe.tal"
constraints = "/input/ripe.constraints"
# ta = "/input/ripe.cer" # uncomment to pin a fixed TA certificate