# This file is in the public domain. # [exchange] # Where do we store the private keys the exchange needs at # runtime? (Denomination and signing keys are then stored # in respective subdirectories.) KEYDIR = ${TALER_DATA_HOME}/exchange/live-keys/ # Directory where the exchange expects to find revocation # certificates (and where taler-exchange-keyup will write them). REVOCATION_DIR = ${TALER_DATA_HOME}/exchange/revocations/ # Master public key used to sign the exchange's various keys # This must be adjusted to your actually installation. # MASTER_PUBLIC_KEY = 98NJW3CQHZQGQXTY3K85K531XKPAPAVV4Q5V8PYYRR00NJGZWNVG # How long do we allow /keys to be cached at most? The actual # limit is the minimum of this value and the first expected # significant change in /keys based on the expiration times. # Used to artificially reduce caching (addresses #5747). MAX_KEYS_CACHING = forever # After how many requests should the exchange auto-restart # (to address potential issues with memory fragmentation)? # If this option is not specified, auto-restarting is disabled. # MAX_REQUESTS = 10000000 # How to access our database DB = postgres # Where do we store the offline master private key of the exchange? MASTER_PRIV_FILE = ${TALER_DATA_HOME}/exchange/offline-keys/master.priv # Network configuration for the normal API/service HTTP server # serve via tcp socket (on PORT) SERVE = tcp # Unix domain socket to listen on, # only effective with "SERVE = unix" UNIXPATH = ${TALER_RUNTIME_DIR}/exchange.http UNIXPATH_MODE = 660 # HTTP port the exchange listens to PORT = 8081 # Base URL of the exchange (public-facing). Due to reverse proxies, # this may or may not match our port or hostname at all and can thus # not be determined automatically. Note that a globally reachable name # is required, so 'localhost' will not work except for testing. # Required for wire transfers as we need to include it in the wire # transfers to enable tracking. BASE_URL = http://localhost:8081/ # How long should the aggregator (and closer, and transfer) # sleep if it has nothing to do? AGGREGATOR_IDLE_SLEEP_INTERVAL = 60 s # How long should wirewatch sleep if it has nothing to do? # (Set very aggressively here for the demonstrators to be # super fast.) WIREWATCH_IDLE_SLEEP_INTERVAL = 1 s # how long is one signkey valid? SIGNKEY_DURATION = 4 weeks # how long are the signatures with the signkey valid? LEGAL_DURATION = 2 years # how long do we generate denomination and signing keys # ahead of time? LOOKAHEAD_SIGN = 32 weeks 1 day # how long do we provide to clients denomination and signing keys # ahead of time? LOOKAHEAD_PROVIDE = 4 weeks 1 day # Directory with our terms of service. # TERMS_DIR = # Etag / filename for the terms of service. # TERMS_ETAG = # Directory with our privacy policy. # PRIVACY_DIR = # Etag / filename for the privacy policy. # PRIVACY_ETAG =