server_name: vps-nbg1
listen: 0.0.0.0:4222
tls {
cert_file: "/var/nats/tls/sync.craftdesign.group.crt"
key_file: "/var/nats/tls/sync.craftdesign.group.key"
}
jetstream {
store_dir: "/var/nats/jetstream"
}
# JWT resolver — accounts pushed via `nsc push --all`
resolver: {
type: full
dir: "/var/nats/jwt"
allow_delete: false
interval: "2m"
}
# Operator JWT — substituted by start.sh via envsubst
operator: $OPERATOR_JWT
# System account public key — matches the SYS account configured in nsc
system_account: $SYS_ACCOUNT_KEY
# Cluster placeholder — populate when adding a second node
# cluster {
# name: fossil-sync
# listen: 0.0.0.0:6222
# routes: [ nats://node2.internal:6222 ]
# }