update default configuration file
# Load peers at startup from this file and save peers to this file at shutdown
--peerfile /etc/kadnode/peers.txt
-#Announce an identifier for the entire runtime of KadNode.
+# For authentication via TLS, x509 certificates need to be provided.
+# The server needs a tuple of the certificate file and private key file:
+# --tls-server-cert mydomain.crt,mydomain.key
+# The domain in the Common Name field of the certificate will be announced.
#
-#--value-id mycomputer.p2p
+# The clients doing the lookup need to be provided with the appropiate CA certificates:
+# --tls-client-cert /usr/share/ca-certificates/mozilla
#
-# To prevent others from claiming the same domain you should
-# use cryptographic keys for authentication:
-#
-# 1. Create a public/secret key pairon the console:
-# $kadnode --auth-gen-keys
-#
-# 2. Make sure these two lines are in this file:
-# --auth-add-skey mycomputer.p2p:<secret-key>
-# --value-id mycomputer.p2p
-#
-# 3. Add the following line on other computers:
-# --auth-add-pkey mycomputer.p2p:<public-key>
+# Note: --announce is only needed when KadNode does not do the authentication.
+
+# As an alternative, create a secret/public key via 'kadnode --bob-create-key'
+# and load the secret keys as PEM file:
+# --bob-load-key <secret-key-pem-file>
#
+# Other nodes can use <public-key-hex>.p2p in the browser to resolve the node.
-#Switch to IPv6 mode
-#--mode ipv6
+# Enable DNS proxy behavior. Reads /etc/resolv.conf by default.
+# --dns-proxy-enable
+#
+# Or specify a DNS server by IP address:
+# --dns-proxy-server <IP-address>
# Disable UPnP/NAT-PMP support
# --disable-forwarding
