; HyBBX Main — binary: hybbxd
; Local BBX (users/mail/chat). Remote users: WebSocket → reverse-proxy only.
; HBX circuit hub for Proxy (hybbxpd). mains_proxy for Secondary peers (hybbxsd).
; Copy: cp share/hybbxd-main.ini.example local/hybbx.ini

[service]
name = hyBBX
; Required when hybbxd is started as root — process drops here before plugins bind
user = hybbx
group = hybbx
login_announce = no

[storage]
backend = flatfile
path = data

[auth]
auto_login = yes

[traffic]
baud = 2400
line_width = 80
pace_output = yes
ansi = no

[log]
enabled = yes
dir = logs
level = warn

[monitor]
enabled = yes
follow_hybbx = yes
follow_security = yes
invisible-sysop = no
invite_timeout_sec = 20

[security]
enabled = yes
telnet = no
ssh = no
websocket = yes
circuit = yes

[mail]
enabled = yes
path = mail

[networks]
; Main layout: WebSocket user path + circuit hub + optional mains_proxy
telnet = no
ssh = no
websocket = yes
ax25 = no
baycom = no
tmodem = no
ardop = no
crdop = no
circuit = yes
mains_proxy = no

[transport.websocket]
bind = 127.0.0.1
port = 8080
; Put nginx/caddy reverse-proxy in front for public TLS.

[circuit]
enabled = yes
bind = 0.0.0.0
port = 7323
link_auth = yes
link_password = changeme
max_links = 8
balance = yes

; Example Proxy registry row (hybbxpd attaches with matching link_id/password)
; [transport.packet_radio1]  — superseded: RF via MAX25 + hybbxpd, not Main packet_radio
[transport.baycom1]
link_id = proxy-1
link_password = changeme
link_role = link
; Bridge credentials only on Main — no local device on hybbxd