jobs:
- name: sink
  type: sink
  serve:
      type: tls
      listen: ":8888"
      ca: "/etc/zrepl/prod.crt"
      cert: "/etc/zrepl/backups.crt"
      key: "/etc/zrepl/backups.key"
      client_cns:
        - "prod"
  recv:
    placeholder:
      encryption: inherit # use 'off' if sender uses send.encrypted
  root_fs: "storage/zrepl/sink"