Agent Configuration

server:
  # Hostname or IP address of the SysManage server
  hostname: "sysmanage.example.com"

  # Port number for the SysManage server
  port: 8080

  # Use HTTPS for secure communication
  use_https: true

  # Verify SSL certificates (recommended in production)
  verify_ssl: true

client:
  # Optional: Override the system hostname detection
  # If not specified, the agent will auto-detect the system hostname
  # hostname_override: "my-custom-hostname"

  # Registration retry settings
  registration_retry_interval: 30  # seconds between registration attempts
  max_registration_retries: 10     # maximum number of retry attempts (-1 for infinite)

  # Update check settings
  update_check_interval: 3600      # seconds between update checks (default: 1 hour)

  # Package collection settings
  package_collection_interval: 86400  # seconds between package collection runs (default: 24 hours)
  package_collection_enabled: true    # enable/disable automatic package collection
  package_collection_at_startup: true # collect packages at agent startup

i18n:
  # Language/locale for agent messages and logging
  # Supported languages: en, es, fr, de, it, pt, nl, ja, zh_CN, ko, ru
  language: "en"

logging:
  # Log levels to include: DEBUG, INFO, WARNING, ERROR, CRITICAL
  # Can combine multiple levels with pipe: "INFO|WARNING|ERROR|CRITICAL"
  # Examples: "DEBUG" (debug only), "INFO|ERROR" (info and errors only)
  level: "INFO|WARNING|ERROR|CRITICAL"

  # Log to file (default is logs/* in service directory)
  # file: "/var/log/sysmanage-agent.log"

  # Log format - customize the log message appearance
  format: "%(asctime)s - %(name)s - %(levelname)s - %(message)s"

websocket:
  # Auto-reconnect on connection loss
  auto_reconnect: true

  # Reconnection interval in seconds
  reconnect_interval: 5

  # Ping interval to keep connection alive
  ping_interval: 60

database:
  # Path to the agent's SQLite database file
  # If not specified, defaults to "agent.db" in the agent's working directory
  path: "agent.db"

  # Whether to automatically run database migrations on startup
  auto_migrate: true

message_queue:
  # Message expiration timeout in minutes (default: 60)
  # Messages older than this will be marked as expired and no longer processed
  expiration_timeout_minutes: 60

  # Cleanup interval in minutes (default: 30)
  # How often to check for and clean up expired messages
  cleanup_interval_minutes: 30

script_execution:
  # Enable or disable script execution functionality
  # Setting this to false completely disables script execution
  enabled: false

  # Maximum script execution timeout in seconds (default: 300 = 5 minutes)
  # Scripts that run longer than this will be terminated
  timeout: 300

  # Maximum number of concurrent script executions allowed
  # This prevents resource exhaustion from multiple simultaneous scripts
  max_concurrent: 3

  # Allowed shells for script execution
  # Only these shells will be permitted for script execution
  allowed_shells:
    - "bash"        # Default shell on most Linux systems
    - "sh"          # POSIX shell
    - "zsh"         # macOS default shell and popular Linux shell

  # User execution restrictions (only applies when agent runs as root)
  user_restrictions:
    # Allow script execution as different users (requires agent to run as root)
    allow_user_switching: false

    # List of users that scripts are allowed to run as
    # Empty list means any user is allowed (if allow_user_switching is true)
    allowed_users: []

  # Security restrictions
  security:
    # Prevent scripts from accessing sensitive files/directories
    # This is advisory - actual enforcement depends on user permissions
    restricted_paths:
      - "/etc/passwd"
      - "/etc/shadow"
      - "/etc/ssh/"
      - "/home/*/.ssh/"
      - "/root/.ssh/"
      - "*.key"
      - "*.pem"

    # Log all script executions for audit purposes
    audit_logging: true

    # Require explicit approval for each script execution
    # If true, scripts will be queued for manual approval
    require_approval: false

collection:
  # Enable collection of system information
  enabled: true

  # Collection intervals (in seconds)
  intervals:
    system_info: 300      # 5 minutes
    software: 3600        # 1 hour
    hardware: 1800        # 30 minutes
    network: 300          # 5 minutes
    users: 1800           # 30 minutes
    available_packages: 86400  # 24 hours (daily collection of available packages)

  # Types of data to collect
  types:
    software_packages: true
    system_updates: true
    hardware_info: true
    network_interfaces: true
    user_accounts: true
    system_metrics: true
    available_packages: true  # Collect available packages from package managers