# Configuration for tlsrpt-collectd, tlsrpt-fetcher and tlsrpt-reportd.
# Every option is described in tlsrpt-collectd(1), tlsrpt-fetcher(1) and
# tlsrpt-reportd(1).

[tlsrpt_collectd]
storage = sqlite:///var/lib/tlsrpt-reporter/tlsrpt-collectd.sqlite
# The MTA sends one datagram per TLS handshake to this socket.
socketname = @SOCKET@
# The MTA only has to write to it; it reaches the socket through the
# group of its directory (see /etc/conf.d/tlsrpt-collectd).
socketmode = 0660
logfilename = /var/log/tlsrpt-reporter/tlsrpt-collectd.log

[tlsrpt_fetcher]
storage = sqlite:///var/lib/tlsrpt-reporter/tlsrpt-collectd.sqlite
logfilename = /var/log/tlsrpt-reporter/tlsrpt-fetcher.log

[tlsrpt_reportd]
dbname = /var/lib/tlsrpt-reporter/tlsrpt-reportd.sqlite
logfilename = /var/log/tlsrpt-reporter/tlsrpt-reportd.log
# Without --config_file the fetcher reads /etc/tlsrpt/fetcher.cfg, does
# not find the collector's database and reports nothing.
fetchers = tlsrpt-fetcher --config_file /etc/tlsrpt-reporter/tlsrpt-reporter.cfg
# Set these three before starting tlsrpt-reportd: they go out in every
# report. The init script refuses to start while EXAMPLE.COM is here.
organization_name = EXAMPLE.COM
contact_info = tlsrpt@EXAMPLE.COM
sender_address = noreply@EXAMPLE.COM