61 lines
2.0 KiB
YAML
61 lines
2.0 KiB
YAML
# FIPS daemon configuration for laantungir.net
|
|
# Server: VPS at 15.235.3.231 (public IP, no NAT)
|
|
# Node identity: npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud
|
|
# NodeAddr: e3da8293e6ea58807bd02b4749824243
|
|
# Installed at: /etc/fips/fips.yaml
|
|
#
|
|
# IMPORTANT: This config binds transports to the public IP 15.235.3.231
|
|
# (not 0.0.0.0) so that build_overlay_advert() produces a non-unspecified
|
|
# local_addr() and the endpoints actually get advertised on Nostr.
|
|
# See README.md "Why bind to the public IP" for the full rationale.
|
|
|
|
node:
|
|
identity:
|
|
persistent: true
|
|
discovery:
|
|
nostr:
|
|
enabled: true
|
|
advertise: true
|
|
policy: open
|
|
|
|
tun:
|
|
enabled: true
|
|
name: fips0
|
|
mtu: 1280
|
|
|
|
dns:
|
|
enabled: true
|
|
bind_addr: "127.0.0.1"
|
|
port: 5354
|
|
|
|
transports:
|
|
udp:
|
|
bind_addr: "15.235.3.231:2121"
|
|
advertise_on_nostr: true # REQUIRED: defaults to false; without this no advert is published
|
|
public: true # Advertise as host:port (not "nat") — server has a public IP
|
|
tcp:
|
|
bind_addr: "15.235.3.231:8443"
|
|
advertise_on_nostr: true # REQUIRED: defaults to false
|
|
tor:
|
|
mode: "directory"
|
|
socks5_addr: "127.0.0.1:9050"
|
|
directory_service:
|
|
hostname_file: "/var/lib/tor/fips_mesh/hostname"
|
|
bind_addr: "127.0.0.1:9443"
|
|
advertise_on_nostr: true # REQUIRED: defaults to false; without this Tor endpoint isn't advertised
|
|
advertised_port: 9443 # Must match the virtual port in torrc's HiddenServicePort directive
|
|
|
|
peers:
|
|
- npub: "npub1qmc3cvfz0yu2hx96nq3gp55zdan2qclealn7xshgr448d3nh6lks7zel98"
|
|
alias: "fips-test-node"
|
|
addresses:
|
|
- transport: udp
|
|
addr: "217.77.8.91:2121"
|
|
connect_policy: auto_connect
|
|
- npub: "npub1zv58cn7v83mxvttl70w5fwjwuclfmntv9cnmv5wmz2nzz88u5urqvdx96n"
|
|
alias: "fips-v0l-io" # NOTE: dots are rejected by the alias validator; use dashes
|
|
addresses:
|
|
- transport: udp
|
|
addr: "fips.v0l.io:2121"
|
|
connect_policy: auto_connect
|