StellaOps:
  Crypto:
    Registry:
      ActiveProfile: ru-offline
      PreferredProviders:
        - default
      Profiles:
        ru-offline:
          PreferredProviders:
            - ru.cryptopro.csp
            - ru.pkcs11
    CryptoPro:
      Keys:
        - KeyId: ru-csp-default
          LibraryPath: /opt/cprocsp/lib/amd64/libcapi20.so
          ContainerLabel: CN=RootPack Signing
          CertificateThumbprint: "<thumbprint>"
    Pkcs11:
      Keys:
        - KeyId: ru-token-default
          LibraryPath: /usr/local/lib/librutokenecp.so
          SlotId: "0x1"
          Pin: "${PKCS11_PIN}"
          PrivateKeyLabel: rootpack-signing
          CertificateThumbprint: "<thumbprint>"
    Diagnostics:
      Providers:
        Enabled: true
        Metrics:
          LogLevel: Information