# Container paths. Omit ta to refresh the TA certificate each run. # TAL files themselves are operator-maintained and are never auto-updated. config-version = 1 mode = "daemon" state-root = "/data" interval-secs = 60 retain-runs = 20 shutdown-grace-secs = 30 # max-runs = 3 # uncomment only for a finite run run-timeout-secs = 1800 require-complete = true ta-refresh-policy = "allow-valid-cache" # Set false to ignore all constraints files, including adjacent auto-discovery. ta-constraints-enabled = true log-level = "info" log-format = "text" [[anchors]] id = "afrinic" tal = "/input/afrinic.tal" constraints = "/input/afrinic.constraints" # ta = "/input/afrinic.cer" # uncomment to pin a fixed TA certificate [[anchors]] id = "apnic" tal = "/input/apnic.tal" constraints = "/input/apnic.constraints" # ta = "/input/apnic.cer" # uncomment to pin a fixed TA certificate [[anchors]] id = "arin" tal = "/input/arin.tal" constraints = "/input/arin.constraints" # ta = "/input/arin.cer" # uncomment to pin a fixed TA certificate [[anchors]] id = "lacnic" tal = "/input/lacnic.tal" constraints = "/input/lacnic.constraints" # ta = "/input/lacnic.cer" # uncomment to pin a fixed TA certificate [[anchors]] id = "ripe" tal = "/input/ripe.tal" constraints = "/input/ripe.constraints" # ta = "/input/ripe.cer" # uncomment to pin a fixed TA certificate