config.yaml

          firewall:
            conntrack:
              default_timeout: 10m
              max_connections: 100000
              tcp_timeout: 12m
              udp_timeout: 3m
            inbound:
            - host: any
              port: any
              proto: any
            outbound:
            - host: any
              port: any
              proto: tcp
          lighthouse:
            am_lighthouse: false
            hosts:
            - 192.168.100.1
]            interval: 60
          listen:
            host: 0.0.0.0
            port: 4242
          logging:
            format: json
            level: debug
          pki:
            ca: /tmp/ca.crt
            cert: /tmp/bkroger.crt
            key: /tmp/bkroger.key
          punchy:
            punch: true
          static_host_map:
            ## This will be replaced by the registration.py process.
            192.168.100.1:
            - lighthouse0.totaly.awesome.fqdn.com:4242
          tun:
            dev: nebula1
            disabled: false
            drop_local_broadcast: false
            drop_multicast: false
            mtu: 1300
            routes: null
            tx_queue: 500
            unsafe_routes:
            - route: 172.x.x.x/16
              via: 192.168.100.1