[http_server]
sockets = ["127.0.0.1:8080"]
private_key = "./work/https.key"
certificate = "./work/https.crt"
insecure_http = false

[attestation_token]
trusted_certs_paths = ["./work/ca-cert.pem"]

[attestation_service]
type = "coco_as_builtin"
work_dir = "./work/attestation-service"
policy_engine = "opa"

[attestation_service.attestation_token_broker]
type = "Ear"
duration_min = 5

[attestation_service.attestation_token_broker.signer]
key_path = "./work/token.key"
cert_path = "./work/token-cert-chain.pem"

[attestation_service.rvps_config]
type = "BuiltIn"

[policy_engine]
policy_path = "./work/kbs-policy.rego"

[admin]
auth_public_key = "./work/kbs.pem"

[[plugins]]
name = "resource"
type = "LocalFs"
dir_path = "./work/repository"
