# MoonBite seed-node configuration  ->  /etc/moonbite/moonbite.conf
# A "seed node" is a permanently-online full node that new nodes connect to
# in order to discover the rest of the network. Run 2-5 of these on separate VPS
# hosts and hard-code their IPs into chainparams.cpp (vSeeds / vFixedSeeds) or a
# DNS seeder before public launch.

# --- Identity / behaviour ---
server=1
daemon=1
listen=1
txindex=1                 # required if this node also backs the block explorer
# UTXO cache (MB). 128 is safe on a 512MB VPS alongside the ~256MB RandomX
# PoW-validation cache + node baseline (add swap on tiny hosts). Raise on
# bigger VPS for faster sync/validation.
dbcache=128

# --- P2P: accept inbound connections from the whole internet ---
port=9444
bind=0.0.0.0
maxconnections=125
# discover=1 lets the node advertise its own public address to peers.
discover=1
# Let inbound peers serve block downloads. A young chain's genesis timestamp is
# far in the past, so a fresh seed self-classifies as "in IBD" and, by default,
# will only download blocks from OUTBOUND or whitelisted peers. A solo miner
# behind NAT can only ever connect INBOUND, so without this the seed never
# receives the blocks it mines. noban+download grants no spend/admin rights.
# whitelist=download,noban@0.0.0.0/0 was REMOVED (audit 2026-10-09, M2): it made
# every peer unbannable and contributed to the 2026-09-19 seed-1 outage. Do not
# re-add a 0.0.0.0/0 whitelist; whitelist specific trusted peers only if needed.
# listenonion=0            # set 1 + torcontrol if running behind Tor

# --- Peer to the live MoonBite network ---
# The canonical seed set lives in deploy/seeds.txt. setup-node.sh reads that
# file and regenerates these addnode= lines, so keep seeds.txt authoritative
# and add permanent VPS seeds there (one host:port per line).
# Seed nodes on the public-launch chain (genesis ffe25d92...). deploy/seeds.txt is authoritative.
addnode=67.205.154.64:9444
addnode=165.232.106.9:9444

# --- RPC: KEEP PRIVATE. Only localhost + the explorer host. ---
rpcport=9445
rpcbind=127.0.0.1
rpcallowip=127.0.0.1
# Generate a strong credential pair, do NOT reuse this example:
rpcuser=CHANGE_ME_user
rpcpassword=CHANGE_ME_LONG_RANDOM_64_CHARS
# Better: use rpcauth= (hashed) instead of a plaintext password. Generate with
# the share/rpcauth/rpcauth.py helper from the source tree.

# --- Logging ---
# debug=net               # uncomment to debug peer connectivity
shrinkdebugfile=1

# Stay out of sync mode on a quiet chain, so blocks are fetched from inbound
# miners too (default 24 h would freeze a seed whose tip is a day old).
maxtipage=31536000