# FIPS Node {{NODE_NAME}} configuration ({{TOPOLOGY}} topology)
#
# Identity: {{NPUB}}

node:
  identity:
    nsec: "{{NSEC}}"

tun:
  enabled: true
  name: fips0
  mtu: 1280

dns:
  enabled: true

transports:
  udp:
    bind_addr: "0.0.0.0:2121"
    # Docker bridge supports 1500-MTU IPv4 so 1472 is safe here.
    # Operator-facing daemon default is 1280 (IPv6 minimum).
    mtu: 1472
    # recv_buf_size: 2097152   # 2 MB (default)
    # send_buf_size: 2097152   # 2 MB (default)
    # Note: The kernel clamps socket buffers to net.core.rmem_max / wmem_max.
    # Ensure these sysctls are >= the configured buffer sizes:
    #   sysctl -w net.core.rmem_max=2097152
    #   sysctl -w net.core.wmem_max=2097152

peers:
{{PEERS}}