Variables

Signed wrapper payload (PFC_SIGNED_CONFIG)

• crypto.mode: npe | lab-xor | plain-lab

• routing.mode: passthrough (dest in the clear; body ciphertext)

• logging.mode: summary

• admin.history_cube: admin-history cube id

• crypto.system_key_id: Network Error Bundle system key

Process environment

• PFC_REQUIRE_AUTH, PFC_REQUIRE_NPE (unset on live ns1)

• PFC_NATS_KEY, PFC_FORBID_PLAIN

• NATS_URL, SM_LEAF_HUB, SM_HTTP

• PFC_SIGNED_CONFIG, PFC_CONFIG_KEY_PEM, NPE_BIN

• PFC_IPFS_URL, PFC_REPL_URL

Timeouts: NATS request-reply 5s, replica ingest 4s, pin 30s, NPE send 15s.