194 lines
3.4 KiB
TOML
194 lines
3.4 KiB
TOML
|
[control_center.audit]
|
||
|
|
enabled = false
|
||
|
|
redact_sensitive = true
|
||
|
|
|
||
|
|
[control_center.audit.storage]
|
||
|
|
immutable = false
|
||
|
|
retention_days = 90
|
||
|
|
|
||
|
|
[control_center.compliance]
|
||
|
|
enabled = false
|
||
|
|
encryption_required = false
|
||
|
|
|
||
|
|
[control_center.compliance.data_retention]
|
||
|
|
audit_log_days = 2555
|
||
|
|
policy_years = 7
|
||
|
|
|
||
|
|
[control_center.compliance.validation]
|
||
|
|
enabled = false
|
||
|
|
interval_hours = 24
|
||
|
|
|
||
|
|
[control_center.database]
|
||
|
|
backend = "rocksdb"
|
||
|
|
max_retries = "3"
|
||
|
|
path = "/var/lib/provisioning/control-center/data"
|
||
|
|
pool_size = 10
|
||
|
|
retry = true
|
||
|
|
timeout = 30
|
||
|
|
|
||
|
|
[control_center.integrations.ldap]
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.integrations.oauth2]
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.integrations.webhooks]
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.logging]
|
||
|
|
format = "&"
|
||
|
|
level = "&"
|
||
|
|
outputs = ["stdout"]
|
||
|
|
|
||
|
|
[control_center.logging.fields]
|
||
|
|
caller = false
|
||
|
|
hostname = true
|
||
|
|
pid = true
|
||
|
|
service_name = true
|
||
|
|
stack_trace = false
|
||
|
|
timestamp = true
|
||
|
|
|
||
|
|
[control_center.logging.file]
|
||
|
|
compress = false
|
||
|
|
max_age = 30
|
||
|
|
max_backups = 10
|
||
|
|
max_size = 104857600
|
||
|
|
path = "/var/log/provisioning/service.log"
|
||
|
|
|
||
|
|
[control_center.logging.performance]
|
||
|
|
enabled = false
|
||
|
|
memory_info = false
|
||
|
|
slow_threshold = 1000
|
||
|
|
|
||
|
|
[control_center.logging.sampling]
|
||
|
|
enabled = false
|
||
|
|
initial = 100
|
||
|
|
thereafter = 100
|
||
|
|
|
||
|
|
[control_center.logging.syslog]
|
||
|
|
protocol = "udp"
|
||
|
|
|
||
|
|
[control_center.monitoring]
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.monitoring.alerting]
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.monitoring.health_check]
|
||
|
|
enabled = false
|
||
|
|
endpoint = "/health"
|
||
|
|
healthy_threshold = 2
|
||
|
|
interval = 30
|
||
|
|
timeout = 5000
|
||
|
|
type = "&"
|
||
|
|
unhealthy_threshold = 3
|
||
|
|
|
||
|
|
[control_center.monitoring.metrics]
|
||
|
|
buffer_size = 1000
|
||
|
|
enabled = false
|
||
|
|
interval = 60
|
||
|
|
prometheus_path = "/metrics"
|
||
|
|
retention_days = 30
|
||
|
|
|
||
|
|
[control_center.monitoring.resources]
|
||
|
|
alert_threshold = 80
|
||
|
|
cpu = false
|
||
|
|
disk = false
|
||
|
|
memory = false
|
||
|
|
network = false
|
||
|
|
|
||
|
|
[control_center.monitoring.tracing]
|
||
|
|
enabled = false
|
||
|
|
sample_rate = 0.1
|
||
|
|
|
||
|
|
[control_center.policy]
|
||
|
|
enabled = true
|
||
|
|
|
||
|
|
[control_center.policy.cache]
|
||
|
|
enabled = true
|
||
|
|
max_policies = 10000
|
||
|
|
ttl = 3600
|
||
|
|
|
||
|
|
[control_center.policy.versioning]
|
||
|
|
enabled = true
|
||
|
|
max_versions = 20
|
||
|
|
|
||
|
|
[control_center.rbac]
|
||
|
|
attribute_based = false
|
||
|
|
default_role = "user"
|
||
|
|
dynamic_roles = false
|
||
|
|
enabled = true
|
||
|
|
hierarchy = true
|
||
|
|
|
||
|
|
[control_center.rbac.roles]
|
||
|
|
admin = true
|
||
|
|
operator = true
|
||
|
|
viewer = true
|
||
|
|
|
||
|
|
[control_center.security.cors]
|
||
|
|
allow_credentials = false
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.security.jwt]
|
||
|
|
algorithm = "HS256"
|
||
|
|
audience = "provisioning"
|
||
|
|
expiration = 3600
|
||
|
|
issuer = "control-center"
|
||
|
|
refresh_expiration = 86400
|
||
|
|
secret = "change_me_in_production"
|
||
|
|
|
||
|
|
[control_center.security.mfa]
|
||
|
|
lockout_duration = 15
|
||
|
|
max_attempts = "5"
|
||
|
|
methods = ["totp"]
|
||
|
|
required = false
|
||
|
|
|
||
|
|
[control_center.security.rate_limiting]
|
||
|
|
enabled = false
|
||
|
|
max_requests = "1000"
|
||
|
|
window_seconds = 60
|
||
|
|
|
||
|
|
[control_center.security.rbac]
|
||
|
|
default_role = "user"
|
||
|
|
enabled = true
|
||
|
|
inheritance = true
|
||
|
|
|
||
|
|
[control_center.security.session]
|
||
|
|
idle_timeout = 3600
|
||
|
|
max_duration = 86400
|
||
|
|
tracking = false
|
||
|
|
|
||
|
|
[control_center.security.tls]
|
||
|
|
client_auth = false
|
||
|
|
enabled = false
|
||
|
|
|
||
|
|
[control_center.server]
|
||
|
|
graceful_shutdown = true
|
||
|
|
host = "127.0.0.1"
|
||
|
|
keep_alive = 75
|
||
|
|
max_connections = 100
|
||
|
|
port = 8080
|
||
|
|
request_timeout = 30000
|
||
|
|
shutdown_timeout = 30
|
||
|
|
workers = 4
|
||
|
|
|
||
|
|
[control_center.users]
|
||
|
|
audit_enabled = false
|
||
|
|
enabled = true
|
||
|
|
|
||
|
|
[control_center.users.registration]
|
||
|
|
auto_assign_role = "user"
|
||
|
|
enabled = true
|
||
|
|
requires_approval = false
|
||
|
|
|
||
|
|
[control_center.users.sessions]
|
||
|
|
absolute_timeout = 86400
|
||
|
|
idle_timeout = 3600
|
||
|
|
max_active = 5
|
||
|
|
|
||
|
|
[control_center.workspace]
|
||
|
|
enabled = true
|
||
|
|
multi_workspace = false
|
||
|
|
name = "default"
|
||
|
|
path = "/var/lib/provisioning/control-center"
|