fix(windows): disable outlook popup and enforce smtp-only email monitoring

ansible/group_vars/all.example.yml

@@ -35,3 +35,8 @@ aw_worktime_to: "17:00"
 aw_worktime_start_of_day: "{{ aw_worktime_from }}"
 aw_server_always_active_pattern: "aw-watcher-window"
 aw_server_landingpage: "/activity/SHARKON2025/view/"
+
+aw_dlp_policy_engine_enabled: true
+aw_dlp_policy_engine_bind_host: "0.0.0.0"
+aw_dlp_policy_engine_port: 5601
+aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"

ansible/group_vars/all.yml

@@ -27,6 +27,10 @@ aw_dlp_ioc_workdir: "/opt/activitywatch/dlp-ioc"
 aw_dlp_ioc_rules_zip_url: "https://github.com/Yamato-Security/hayabusa-rules/archive/refs/heads/main.zip"
 aw_dlp_ioc_refresh_on_boot_sec: "5min"
 aw_dlp_ioc_refresh_interval: "6h"
+aw_dlp_policy_engine_enabled: true
+aw_dlp_policy_engine_bind_host: "0.0.0.0"
+aw_dlp_policy_engine_port: 5601
+aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"
 
 aw_worktime_from: "08:00"
 aw_worktime_to: "17:00"

ansible/group_vars/aw_server.yml

@@ -7,3 +7,12 @@ ansible_become: true
 ansible_become_method: sudo
 # If sudo password differs, set AW_SUDO_PASSWORD. Otherwise it will reuse AW_SSH_PASSWORD.
 ansible_become_password: "{{ lookup('env', 'AW_SUDO_PASSWORD') | default(lookup('env', 'AW_SSH_PASSWORD'), true) }}"
+
+# Hayabusa IOC refresh settings (backward compatible - defaults to disabled)
+aw_hayabusa_ioc_refresh_enabled: false
+aw_hayabusa_rules_root: "/mnt/usb_hdd1/Projects/hayabusa/rules"
+aw_hayabusa_ioc_output_dir: "{{ aw_server_data_dir }}/dlp-ioc"
+aw_dlp_policy_engine_enabled: true
+aw_dlp_policy_engine_bind_host: "0.0.0.0"
+aw_dlp_policy_engine_port: 5601
+aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"

ansible/group_vars/aw_windows.yml

@@ -25,6 +25,12 @@ aw_windows_extra_users: []
 aw_windows_install_root: "C:\\Program Files\\AWatch-rus\\bin"
 aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
 aw_windows_hostname_override: ""
+aw_windows_policy_mode: "local"
+aw_windows_policy_refresh_seconds: 300
+aw_windows_policy_engine_enabled: false
+aw_windows_policy_engine_host: "{{ aw_windows_server_host }}"
+aw_windows_policy_engine_port: 5601
+aw_windows_policy_engine_scheme: "http"
 
 aw_windows_afk_enabled: true
 aw_windows_window_enabled: true
@@ -53,3 +59,6 @@ aw_windows_migration_report_remote_path: "{{ aw_windows_state_root }}\\aw_migrat
 aw_windows_api_smoke_check_enabled: true
 aw_windows_api_smoke_check_bucket: ""
 aw_windows_api_smoke_check_limit: 10
+
+# Integration test settings (backward compatible - defaults to disabled)
+aw_windows_integration_test_enabled: false