# Backend Interfaces configuration (optional).
[backend_interfaces]
  # interface:port to bind the Backend Interfaces API to.
  #
  # Note: this interface is used both for passive-roaming and when
  # integrating with Join Servers that implement the async interface.
  # Leaving this option blank will disable the Backend Interfaces API,
  # which is fine in most cases.
  bind="0.0.0.0:5138"
  ca_cert="/etc/chirpstack/certs/ca.crt"
#  tls_cert="/etc/chirpstack/certs/server_full.crt"
#  tls_key="/etc/chirpstack/certs/server.key"
  tls_cert="/etc/chirpstack/certs/le_full.pem"
  tls_key="/etc/chirpstack/certs/le_key.pem"

[roaming]
  # Resolve NetID domain suffix.
  #resolve_netid_domain_suffix=".netids.lora-alliance.org"
  
  # Per server roaming configuration (this can be repeated).
  [[roaming.servers]]
  
    net_id="000013"
    
    # Enable default roaming server.
    enabled=true
    
    #async=true
    # Async timeout (set to 0 to disable async interface).
    async_timeout="30s"
    
    #passive_roaming=true
    # Passive-roaming session lifetime (set to 0 for stateless).
    passive_roaming_lifetime="0s"
    
    # Server.
    #
    # If set, this will bypass the DNS resolving of the server.
    server="https://eu.packetbroker.io:5138"
    
    # Use target role suffix.
    #
    # Depending the context of the remote server, this will add
    # the /sns or /fns path to the server endpoint.
    use_target_role_suffix=false

    # CA certificate (path).
    #ca_cert=""
    #ca_cert="/etc/chirpstack/certs/ca.crt"
  
    # TLS certificate (path).
    #tls_cert=""
  
    # TLS key (PKCS#8) (path).
    #tls_key=""
   
    # Authorization header.
    #
    # Optional value of the Authorization header, e.g. token or password.
    authorization_header="Key <mytoken>"