# Configuration showcase for the validation-policy and rsync transport knobs.
# Paths are relative to this TOML file.
#
# The fixed validation time makes this file reproducible. Update it or remove
# the line when using the example against a current public repository.
config-version = 1
mode = "validate"
out = "output/policy"
rrdp-state-dir = "state/policy"
rrdp-sync-mode = "auto"
ccr-out = "output/policy/result.ccr"
publish-dir = "publish/policy"

resource-validation-mode = "validation-update-03" # or "rfc6487"
validation-time = "2026-09-22T00:00:00Z"
sync-preference = "rrdp-then-rsync" # or "rsync-only"
rsync-timeout-secs = 30
rsync-command = "/usr/bin/rsync" # change if rsync is installed elsewhere
rsync-mirror-root = "state/policy-rsync-mirror"
rsync-scope = "module-root" # "host" or "publication-point"

ta-refresh-policy = "allow-valid-cache"
max-ca-depth = 64
http-timeout-secs = 300
http-root-cert = []
parallel-max-repo-sync-workers-global = 8
parallel-phase2-object-workers = 8
parallel-phase2-worker-queue-capacity = 256
parallel-repo-worker-queue-capacity = 1024
log-level = "info"
log-format = "text"
log-progress-interval-secs = 10
require-complete = true
run-timeout-secs = 1800

[[anchors]]
id = "ripe"
tal = "input/ripe.tal"
# ta = "input/ripe.cer" # uncomment for fixed mode
# constraints = "input/ripe.constraints" # must exist when explicit

# Keep the compatibility profile for a general public-repository example.
# Set the first two fields to true to enable strict name/CMS DER checks.
[strict]
name = false
cms-der = false
signed-attrs = false