# FIPS directory-mode test — node A (onion service via HiddenServiceDir)
#
# Runs in directory mode: Tor manages the onion service via HiddenServiceDir
# in torrc. FIPS reads the .onion address from the hostname file.
# No control port needed. Enables Tor Sandbox 1.

node:
  identity:
    nsec: "{{NSEC_A}}"

tun:
  enabled: true
  name: fips0
  mtu: 1280

dns:
  enabled: true
  bind_addr: "127.0.0.1"

transports:
  tor:
    mode: "directory"
    socks5_addr: "127.0.0.1:9050"
    directory_service:
      hostname_file: "/var/lib/tor/fips_onion_service/hostname"
      bind_addr: "127.0.0.1:8443"