nexus.conf (4228B)
1 [paths] 2 LIBEUFIN_NEXUS_HOME = /var/lib/libeufin-nexus 3 4 [nexus-ebics] 5 6 # Currency used by the bank where Nexus is client. 7 CURRENCY = 8 9 # Base URL of the bank server. 10 HOST_BASE_URL = 11 12 # EBICS host ID. 13 HOST_ID = 14 15 # EBICS user ID, as assigned by the bank. 16 USER_ID = 17 18 # EBICS partner ID, as assigned by the bank. 19 PARTNER_ID = 20 21 # EBICS partner ID, as assigned by the bank. 22 SYSTEM_ID = 23 24 # IBAN of the bank account that is associated with the EBICS subscriber 25 IBAN = 26 27 # BIC of the bank account that is associated with the EBICS subscriber 28 BIC = 29 30 # Legal entity that is associated with the EBICS subscriber 31 NAME = 32 33 # File that holds the bank EBICS keys. 34 BANK_PUBLIC_KEYS_FILE = ${LIBEUFIN_NEXUS_HOME}/bank-ebics-keys.json 35 36 # File that holds the client/Nexus EBICS keys. 37 CLIENT_PRIVATE_KEYS_FILE = ${LIBEUFIN_NEXUS_HOME}/client-ebics-keys.json 38 39 # Identifies the EBICS + ISO20022 style used by the bank. 40 # Typically, it is named after the bank itself. 41 # This can either be postfinance, gls, maerki_baumann or valiant. 42 BANK_DIALECT = postfinance 43 44 # Specify the account type and therefore the indexing behavior. 45 # This can either can be normal or exchange. 46 # Exchange accounts bounce invalid incoming Taler transactions. 47 ACCOUNT_TYPE = exchange 48 49 [nexus-setup] 50 # Bank encryption public key hash 51 # BANK_ENCRYPTION_PUB_KEY_HASH = 52 53 # Bank authentication public key hash 54 # BANK_AUTHENTICATION_PUB_KEY_HASH = 55 56 [libeufin-nexusdb-postgres] 57 # Where are the SQL files to setup our tables? 58 SQL_DIR = $DATADIR/sql/ 59 60 # DB connection string 61 CONFIG = postgres:///libeufin 62 63 [nexus-fetch] 64 # How often should ebics-fetch run when the bank does not support real time notification 65 FREQUENCY = 30m 66 67 # At what time of day should ebics-fetch perform a checkpoint 68 CHECKPOINT_TIME_OF_DAY = 19:00 69 70 # Ignore all transactions prior to a certain date, useful when you want to use an existing account with old transactions that should not be bounced. 71 # IGNORE_TRANSACTIONS_BEFORE = YYYY-MM-DD 72 73 # Ignore all malformed transactions prior to a certain date, useful when you want to import old transactions without bouncing the malformed ones a second time 74 # IGNORE_BOUNCES_BEFORE = YYYY-MM-DD 75 76 # Whether to deduce the fee paid by the exchange account from the bounced amount 77 # BOUNCE_DEDUCE_FEE = NO 78 79 # An additional fee to deduce from the bounced amount 80 # BOUNCE_FEE = KUDOS:0 81 82 # Bounce transactions coming from account not matching this regex 83 # RESTRICTION_PAYTO_REGEX = payto://iban/CH.* 84 85 [nexus-submit] 86 # How often should ebics-fetch submit pending transactions 87 FREQUENCY = 30m 88 89 # Whether to wait for manual acknowledgement before submitting transactions 90 # MANUAL_ACK = NO 91 92 [nexus-httpd] 93 # How "libeufin-nexus serve" serves its API, this can either be tcp or unix 94 SERVE = tcp 95 96 # Port on which the HTTP server listens, e.g. 9967. Only used if SERVE is tcp. 97 PORT = 8080 98 99 # Which IP address should we bind to? E.g. ``127.0.0.1`` or ``::1``for loopback. Can also be given as a hostname. Only used if SERVE is tcp. 100 BIND_TO = 0.0.0.0 101 102 # Which unix domain path should we bind to? Only used if SERVE is unix. 103 # UNIXPATH = libeufin-nexus.sock 104 105 # What should be the file access permissions for UNIXPATH? Only used if SERVE is unix. 106 # UNIXPATH_MODE = 660 107 108 [nexus-httpd-wire-gateway-api] 109 # Whether to serve the Wire Gateway API 110 ENABLED = NO 111 112 # Authentication scheme, this can either can be basic, bearer or none. 113 AUTH_METHOD = bearer 114 115 # User name for basic authentication scheme 116 # USERNAME = 117 118 # Password for basic authentication scheme 119 # PASSWORD = 120 121 # Token for bearer authentication scheme 122 TOKEN = 123 124 [nexus-httpd-revenue-api] 125 # Whether to serve the Revenue API 126 ENABLED = NO 127 128 # Authentication scheme, this can either can be basic, bearer or none. 129 AUTH_METHOD = bearer 130 131 # User name for basic authentication scheme 132 # USERNAME = 133 134 # Password for basic authentication scheme 135 # PASSWORD = 136 137 # Token for bearer authentication scheme 138 TOKEN = 139 140 [nexus-httpd-observability-api] 141 # Whether to serve the Observability API 142 ENABLED = NO 143 144 # Authentication scheme, this can either can be basic, bearer or none. 145 AUTH_METHOD = bearer 146 147 # User name for basic authentication scheme 148 # USERNAME = 149 150 # Password for basic authentication scheme 151 # PASSWORD = 152 153 # Token for bearer authentication scheme 154 TOKEN =