all.export      /

# Enable XCache
## Proxy plugin
ofs.osslib libXrdPss.so

## Proxy File Cache aka XCache
pss.cachelib default

# remote data source access method
pss.origin =

# Physical storage management
## Namespace (contains link to the actual data)
oss.localroot /mnt/xcache/ns/

## Metadata directories (cinfo files)
oss.space meta /mnt/xcache/metadata

## Data directories
oss.space data /mnt/xcache/storage/data*

## Xcache spaces assignement
pfc.spaces data meta

# add http support
if exec xrootd
  xrd.protocol http libXrdHttp.so 
  http.secxtractor libXrdSecgsiVOMS.so
  http.header2cgi Authorization authz
fi

# cache log level
# pfc.trace dump
# oss.trace all
# xrootd.trace all
# xrd.trace all
# sec.trace all

# Configure secure protocols (roots/https)
xrd.tls /run/secrets/xrdcert.pem /run/secrets/xrdkey.pem
xrd.tlsca certdir /etc/grid-security/certificates

# authentication
xrootd.seclib libXrdSec.so
sec.protocol gsi -crl:0 -cert:/run/secrets/xrdcert.pem -key:/run/secrets/xrdkey.pem -gridmap:/dev/null -vomsfun:/usr/lib64/libXrdVoms.so
sec.protbind * gsi

# authorization
ofs.authorize 1
acc.authdb /etc/xrootd/Authfile
ofs.authlib ++ libXrdAccSciTokens.so config=/etc/xrootd/scitokens.cfg