[control_center.audit]
enabled = false
redact_sensitive = true

  [control_center.audit.storage]
  immutable = false
  retention_days = 90

[control_center.compliance]
enabled = false
encryption_required = false

  [control_center.compliance.data_retention]
  audit_log_days = 2555
  policy_years = 7

  [control_center.compliance.validation]
  enabled = false
  interval_hours = 24

[control_center.database]
backend = "rocksdb"
max_retries = "3"
path = "/var/lib/provisioning/control-center/data"
pool_size = 10
retry = true
timeout = 30

[control_center.integrations.ldap]
enabled = false

[control_center.integrations.oauth2]
enabled = false

[control_center.integrations.webhooks]
enabled = false

[control_center.logging]
format = "&"
level = "&"
outputs = ["stdout"]

  [control_center.logging.fields]
  caller = false
  hostname = true
  pid = true
  service_name = true
  stack_trace = false
  timestamp = true

  [control_center.logging.file]
  compress = false
  max_age = 30
  max_backups = 10
  max_size = 104857600
  path = "/var/log/provisioning/service.log"

  [control_center.logging.performance]
  enabled = false
  memory_info = false
  slow_threshold = 1000

  [control_center.logging.sampling]
  enabled = false
  initial = 100
  thereafter = 100

  [control_center.logging.syslog]
  protocol = "udp"

[control_center.monitoring]
enabled = false

  [control_center.monitoring.alerting]
  enabled = false

  [control_center.monitoring.health_check]
  enabled = false
  endpoint = "/health"
  healthy_threshold = 2
  interval = 30
  timeout = 5000
  type = "&"
  unhealthy_threshold = 3

  [control_center.monitoring.metrics]
  buffer_size = 1000
  enabled = false
  interval = 60
  prometheus_path = "/metrics"
  retention_days = 30

  [control_center.monitoring.resources]
  alert_threshold = 80
  cpu = false
  disk = false
  memory = false
  network = false

  [control_center.monitoring.tracing]
  enabled = false
  sample_rate = 0.1

[control_center.policy]
enabled = true

  [control_center.policy.cache]
  enabled = true
  max_policies = 10000
  ttl = 3600

  [control_center.policy.versioning]
  enabled = true
  max_versions = 20

[control_center.rbac]
attribute_based = false
default_role = "user"
dynamic_roles = false
enabled = true
hierarchy = true

  [control_center.rbac.roles]
  admin = true
  operator = true
  viewer = true

[control_center.security.cors]
allow_credentials = false
enabled = false

[control_center.security.jwt]
algorithm = "HS256"
audience = "provisioning"
expiration = 3600
issuer = "control-center"
refresh_expiration = 86400
secret = "change_me_in_production"

[control_center.security.mfa]
lockout_duration = 15
max_attempts = "5"
methods = ["totp"]
required = false

[control_center.security.rate_limiting]
enabled = false
max_requests = "1000"
window_seconds = 60

[control_center.security.rbac]
default_role = "user"
enabled = true
inheritance = true

[control_center.security.session]
idle_timeout = 3600
max_duration = 86400
tracking = false

[control_center.security.tls]
client_auth = false
enabled = false

[control_center.server]
graceful_shutdown = true
host = "127.0.0.1"
keep_alive = 75
max_connections = 100
port = 8080
request_timeout = 30000
shutdown_timeout = 30
workers = 4

[control_center.users]
audit_enabled = false
enabled = true

  [control_center.users.registration]
  auto_assign_role = "user"
  enabled = true
  requires_approval = false

  [control_center.users.sessions]
  absolute_timeout = 86400
  idle_timeout = 3600
  max_active = 5

[control_center.workspace]
enabled = true
multi_workspace = false
name = "default"
path = "/var/lib/provisioning/control-center"
