nexus.conf (4409B)
1 [paths] 2 LIBEUFIN_NEXUS_HOME = /var/lib/libeufin-nexus 3 4 [nexus-ebics] 5 6 # Currency used by the bank where Nexus is client. 7 CURRENCY = 8 9 # Base URL of the bank server. 10 HOST_BASE_URL = 11 12 # EBICS host ID. 13 HOST_ID = 14 15 # EBICS user ID, as assigned by the bank. 16 USER_ID = 17 18 # EBICS partner ID, as assigned by the bank. 19 PARTNER_ID = 20 21 # EBICS partner ID, as assigned by the bank. 22 SYSTEM_ID = 23 24 # IBAN of the bank account that is associated with the EBICS subscriber 25 IBAN = 26 27 # BIC of the bank account that is associated with the EBICS subscriber 28 BIC = 29 30 # Legal entity that is associated with the EBICS subscriber 31 NAME = 32 33 # File that holds the bank EBICS keys. 34 BANK_PUBLIC_KEYS_FILE = ${LIBEUFIN_NEXUS_HOME}/bank-ebics-keys.json 35 36 # File that holds the client/Nexus EBICS keys. 37 CLIENT_PRIVATE_KEYS_FILE = ${LIBEUFIN_NEXUS_HOME}/client-ebics-keys.json 38 39 # Identifies the EBICS + ISO20022 style used by the bank. 40 # Typically, it is named after the bank itself. 41 # This can either be postfinance, gls, raiffeisen, maerki_baumann or valiant. 42 BANK_DIALECT = postfinance 43 44 # Specify the account type and therefore the indexing behavior. 45 # This can either can be normal or exchange. 46 # Exchange accounts bounce invalid incoming Taler transactions. 47 ACCOUNT_TYPE = exchange 48 49 # QR IBAN of a QR virtual bank account linked to the configured bank account that can be used for QR BILL 50 # QR_IBAN = CH4431999123000889012 51 52 [nexus-setup] 53 # Bank encryption public key hash 54 # BANK_ENCRYPTION_PUB_KEY_HASH = 55 56 # Bank authentication public key hash 57 # BANK_AUTHENTICATION_PUB_KEY_HASH = 58 59 [libeufin-nexusdb-postgres] 60 # Where are the SQL files to setup our tables? 61 SQL_DIR = $DATADIR/sql/ 62 63 # DB connection string 64 CONFIG = postgres:///libeufin 65 66 [nexus-fetch] 67 # How often should ebics-fetch run when the bank does not support real time notification 68 FREQUENCY = 30m 69 70 # At what time of day should ebics-fetch perform a checkpoint 71 CHECKPOINT_TIME_OF_DAY = 19:00 72 73 # Ignore all transactions prior to a certain date, useful when you want to use an existing account with old transactions that should not be bounced. 74 # IGNORE_TRANSACTIONS_BEFORE = YYYY-MM-DD 75 76 # Ignore all malformed transactions prior to a certain date, useful when you want to import old transactions without bouncing the malformed ones a second time 77 # IGNORE_BOUNCES_BEFORE = YYYY-MM-DD 78 79 # Whether to deduce the fee paid by the exchange account from the bounced amount 80 # BOUNCE_DEDUCE_FEE = NO 81 82 # An additional fee to deduce from the bounced amount 83 # BOUNCE_FEE = KUDOS:0 84 85 # Bounce transactions coming from account not matching this regex 86 # RESTRICTION_PAYTO_REGEX = payto://iban/CH.* 87 88 [nexus-submit] 89 # How often should ebics-fetch submit pending transactions 90 FREQUENCY = 30m 91 92 # Whether to wait for manual acknowledgement before submitting transactions 93 # MANUAL_ACK = NO 94 95 [nexus-httpd] 96 # How "libeufin-nexus serve" serves its API, this can either be tcp or unix 97 SERVE = tcp 98 99 # Port on which the HTTP server listens, e.g. 9967. Only used if SERVE is tcp. 100 PORT = 8080 101 102 # Which IP address should we bind to? E.g. ``127.0.0.1`` or ``::1``for loopback. Can also be given as a hostname. Only used if SERVE is tcp. 103 BIND_TO = 0.0.0.0 104 105 # Which unix domain path should we bind to? Only used if SERVE is unix. 106 # UNIXPATH = libeufin-nexus.sock 107 108 # What should be the file access permissions for UNIXPATH? Only used if SERVE is unix. 109 # UNIXPATH_MODE = 660 110 111 [nexus-httpd-wire-gateway-api] 112 # Whether to serve the Wire Gateway API and the Prepared Transfer API 113 ENABLED = NO 114 115 # Authentication scheme, this can either can be basic, bearer or none. 116 AUTH_METHOD = bearer 117 118 # User name for basic authentication scheme 119 # USERNAME = 120 121 # Password for basic authentication scheme 122 # PASSWORD = 123 124 # Token for bearer authentication scheme 125 TOKEN = 126 127 [nexus-httpd-revenue-api] 128 # Whether to serve the Revenue API 129 ENABLED = NO 130 131 # Authentication scheme, this can either can be basic, bearer or none. 132 AUTH_METHOD = bearer 133 134 # User name for basic authentication scheme 135 # USERNAME = 136 137 # Password for basic authentication scheme 138 # PASSWORD = 139 140 # Token for bearer authentication scheme 141 TOKEN = 142 143 [nexus-httpd-observability-api] 144 # Whether to serve the Observability API 145 ENABLED = NO 146 147 # Authentication scheme, this can either can be basic, bearer or none. 148 AUTH_METHOD = bearer 149 150 # User name for basic authentication scheme 151 # USERNAME = 152 153 # Password for basic authentication scheme 154 # PASSWORD = 155 156 # Token for bearer authentication scheme 157 TOKEN =