Variables
=========

Signed wrapper payload (``PFC_SIGNED_CONFIG``)
----------------------------------------------

* ``crypto.mode``: ``npe`` | ``lab-xor`` | ``plain-lab``
* ``routing.mode``: ``passthrough`` (dest in the clear; body ciphertext)
* ``logging.mode``: ``summary``
* ``admin.history_cube``: admin-history cube id
* ``crypto.system_key_id``: Network Error Bundle system key

Process environment
-------------------

* ``PFC_REQUIRE_AUTH``, ``PFC_REQUIRE_NPE`` (unset on live ns1)
* ``PFC_NATS_KEY``, ``PFC_FORBID_PLAIN``
* ``NATS_URL``, ``SM_LEAF_HUB``, ``SM_HTTP``
* ``PFC_SIGNED_CONFIG``, ``PFC_CONFIG_KEY_PEM``, ``NPE_BIN``
* ``PFC_IPFS_URL``, ``PFC_REPL_URL``

Timeouts: NATS request-reply 5s, replica ingest 4s, pin 30s, NPE send 15s.