37 lines
1.2 KiB
TOML
37 lines
1.2 KiB
TOML
# Container-path configuration showcase for validation policy and rsync.
|
|
# Copy the file outside this directory and set CONFIG_FILE to its absolute path.
|
|
# Live repositories use the current time. Set a fixed validation-time only
|
|
# when replaying a matching frozen input, for example 2026-09-22T00:00:00Z.
|
|
config-version = 1
|
|
mode = "validate"
|
|
out = "/output/policy"
|
|
rrdp-state-dir = "/state/policy"
|
|
rrdp-sync-mode = "auto"
|
|
ccr-out = "/output/policy/result.ccr"
|
|
publish-dir = "/output/publish"
|
|
|
|
resource-validation-mode = "validation-update-03" # or "rfc6487"
|
|
sync-preference = "rrdp-then-rsync" # or "rsync-only"
|
|
rsync-timeout-secs = 30
|
|
rsync-command = "/usr/bin/rsync"
|
|
rsync-mirror-root = "/state/rsync-mirror"
|
|
rsync-scope = "module-root" # "host" or "publication-point"
|
|
|
|
run-timeout-secs = 1800
|
|
require-complete = true
|
|
ta-refresh-policy = "allow-valid-cache"
|
|
log-level = "info"
|
|
log-format = "text"
|
|
|
|
[[anchors]]
|
|
id = "anchor"
|
|
tal = "/input/anchor.tal"
|
|
# ta = "/input/anchor.cer" # uncomment to pin a fixed TA certificate
|
|
|
|
# Keep the compatibility profile for a general public-repository example.
|
|
# Set the first two fields to true to enable strict name/CMS DER checks.
|
|
[strict]
|
|
name = false
|
|
cms-der = false
|
|
signed-attrs = false
|