[control_center.audit]
enabled = false
redact_sensitive = true

[control_center.audit.storage]
immutable = false
retention_days = 90

[control_center.compliance]
enabled = false
encryption_required = false

[control_center.compliance.data_retention]
audit_log_days = 2555
policy_years = 7

[control_center.compliance.validation]
enabled = false
interval_hours = 24

[control_center.database]
backend = "rocksdb"
max_retries = "3"
path = "/var/lib/provisioning/control-center/data"
pool_size = 10
retry = true
timeout = 30

[control_center.integrations.ldap]
enabled = false

[control_center.integrations.oauth2]
enabled = false

[control_center.integrations.webhooks]
enabled = false

[control_center.logging]
format = "&"
level = "&"
outputs = ["stdout"]

[control_center.logging.fields]
caller = false
hostname = true
pid = true
service_name = true
stack_trace = false
timestamp = true

[control_center.logging.file]
compress = false
max_age = 30
max_backups = 10
max_size = 104857600
path = "/var/log/provisioning/service.log"

[control_center.logging.performance]
enabled = false
memory_info = false
slow_threshold = 1000

[control_center.logging.sampling]
enabled = false
initial = 100
thereafter = 100

[control_center.logging.syslog]
protocol = "udp"

[control_center.monitoring]
enabled = false

[control_center.monitoring.alerting]
enabled = false

[control_center.monitoring.health_check]
enabled = false
endpoint = "/health"
healthy_threshold = 2
interval = 30
timeout = 5000
type = "&"
unhealthy_threshold = 3

[control_center.monitoring.metrics]
buffer_size = 1000
enabled = false
interval = 60
prometheus_path = "/metrics"
retention_days = 30

[control_center.monitoring.resources]
alert_threshold = 80
cpu = false
disk = false
memory = false
network = false

[control_center.monitoring.tracing]
enabled = false
sample_rate = 0.1

[control_center.policy]
enabled = true

[control_center.policy.cache]
enabled = true
max_policies = 10000
ttl = 3600

[control_center.policy.versioning]
enabled = true
max_versions = 20

[control_center.rbac]
attribute_based = false
default_role = "user"
dynamic_roles = false
enabled = true
hierarchy = true

[control_center.rbac.roles]
admin = true
operator = true
viewer = true

[control_center.security.cors]
allow_credentials = false
enabled = false

[control_center.security.jwt]
algorithm = "HS256"
audience = "provisioning"
expiration = 3600
issuer = "control-center"
refresh_expiration = 86400
secret = "change_me_in_production"

[control_center.security.mfa]
lockout_duration = 15
max_attempts = "5"
methods = ["totp"]
required = false

[control_center.security.rate_limiting]
enabled = false
max_requests = "1000"
window_seconds = 60

[control_center.security.rbac]
default_role = "user"
enabled = true
inheritance = true

[control_center.security.session]
idle_timeout = 3600
max_duration = 86400
tracking = false

[control_center.security.tls]
client_auth = false
enabled = false

[control_center.server]
graceful_shutdown = true
host = "127.0.0.1"
keep_alive = 75
max_connections = 100
port = 8080
request_timeout = 30000
shutdown_timeout = 30
workers = 4

[control_center.users]
audit_enabled = false
enabled = true

[control_center.users.registration]
auto_assign_role = "user"
enabled = true
requires_approval = false

[control_center.users.sessions]
absolute_timeout = 86400
idle_timeout = 3600
max_active = 5

[control_center.workspace]
enabled = true
multi_workspace = false
name = "default"
path = "/var/lib/provisioning/control-center"