igor04091968
fe87c85a31
CI / Rust checks (push) Waiting to run
CI / Docs and registry checks (push) Waiting to run
CI / Smoke checks (push) Waiting to run
Coverage / Coverage baseline (push) Waiting to run
Security / Cargo audit (push) Waiting to run
Security / Cargo deny (push) Waiting to run
Security / Secret pattern check (push) Waiting to run
Security / Dependency review (push) Waiting to run
- default DetMir DLP runtime to core_only/disabled with load-guard protection - add fail-closed placeholder validation and runtime-scoped artifact checks - document operator re-enable flow for light profile and guard rollback - update prod docs, env examples, and Ansible DLP defaults
106 lines
4.0 KiB
Bash
Executable File
106 lines
4.0 KiB
Bash
Executable File
# Copy to /etc/activitywatch/aw-server.env and fill with real values.
|
|
|
|
# Core AW Server Configuration
|
|
AW_SERVER_VERSION=0.13.2
|
|
AW_SERVER_DOWNLOAD_URL=https://github.com/ActivityWatch/aw-server-rust/releases/download/v0.13.2/aw-server-rust-linux-x86_64.zip
|
|
AW_SERVER_BIND_HOST=0.0.0.0
|
|
AW_SERVER_PORT=5600
|
|
AW_SERVER_WEBUI_DIR=/opt/activitywatch/webui-ru
|
|
AW_SERVER_DATA_DIR=/var/lib/activitywatch
|
|
AW_SERVER_DB_PATH=/var/lib/activitywatch/pebble.db
|
|
AW_SERVER_LOG_DIR=/var/log/activitywatch
|
|
AW_SERVER_USER=activitywatch
|
|
AW_SERVER_GROUP=activitywatch
|
|
|
|
# Worktime API Configuration
|
|
AW_SERVER_PUBLIC_HOST=aw-server
|
|
AW_WORKTIME_REPORT_BASE=http://aw-server:5610
|
|
AW_WORKTIME_TZ=Europe/Moscow
|
|
AW_WORKTIME_HOST=HOST-EXAMPLE
|
|
AW_WORKTIME_EVENTS_LIMIT=5000
|
|
AW_WORKTIME_AW_HTTP_TIMEOUT_SECONDS=6
|
|
AW_WORKTIME_EVENTS_CACHE_TTL_SECONDS=300
|
|
AW_WORKTIME_REPORT_CACHE_TTL_SECONDS=300
|
|
AW_WORKTIME_REPORT_STALE_TTL_SECONDS=3600
|
|
AW_WORKTIME_REPORT_DISK_STALE_TTL_SECONDS=86400
|
|
AW_SERVER_URL=http://127.0.0.1:5600
|
|
AW_DLP_AW_API_BASE=http://127.0.0.1:5600/api/0
|
|
AW_WORKTIME_MANAGER_CACHE_TTL_SECONDS=300
|
|
AW_WORKTIME_MANAGER_ALIASES_JSON=/etc/activitywatch/worktime-manager-aliases.json
|
|
AW_WORKTIME_MANAGER_EXCLUDE_USERS=
|
|
AW_WORKTIME_MANAGEMENT_WARM_ENABLED=1
|
|
AW_WORKTIME_MANAGEMENT_WARM_URL=http://127.0.0.1:5610/reports/worktime/management?day=today&format=json
|
|
AW_WORKTIME_MANAGEMENT_WARM_TIMEOUT_SECONDS=70
|
|
|
|
# DLP IOC Configuration
|
|
AW_DLP_ENABLED=false
|
|
AW_DLP_PROFILE=core_only
|
|
AW_DLP_DISABLED_REASON=detmir_prod_resource_guardrail
|
|
AW_DLP_DISABLED_SINCE=
|
|
AW_CONTAINMENT_ENABLED=false
|
|
AW_CONTAINMENT_MODE=shadow
|
|
AW_CONTAINMENT_POLICY=/etc/activitywatch/containment-policy.json
|
|
AW_CONTAINMENT_DEFAULT_TTL_MINUTES=60
|
|
AW_CONTAINMENT_REQUIRE_ADMIN_CHANNEL_CHECK=true
|
|
AW_CONTAINMENT_ALLOW_AUTO_FOR_SERVERS=false
|
|
AW_DLP_IOC_DIR=/opt/activitywatch/dlp-ioc/output
|
|
|
|
# DLP Policy Engine Configuration
|
|
AW_DLP_POLICY_ENGINE_BIND_HOST=0.0.0.0
|
|
AW_DLP_POLICY_ENGINE_PORT=5601
|
|
AW_DLP_POLICY_ENGINE_DB_PATH=/var/lib/activitywatch/dlp-policy-engine.sqlite
|
|
|
|
# Logging Configuration
|
|
AW_LOG_LEVEL=info
|
|
AW_LOG_TO_JOURNAL=true
|
|
AW_LOG_TO_FILE=true
|
|
|
|
# Health Check Configuration
|
|
AW_HEALTH_CHECK_ENABLED=true
|
|
AW_HEALTH_CHECK_INTERVAL=60
|
|
AW_EXPECT_START_OF_DAY=00:00
|
|
AW_EXPECT_ALWAYS_ACTIVE_PATTERN=aw-watcher-window
|
|
AW_EXPECT_LANDINGPAGE=/#/activity/HOST-EXAMPLE/view/
|
|
AW_HEALTH_STRICT_FILEOPS=0
|
|
AW_MONITORED_WINDOWS_HOST=<WINDOWS_HOST>
|
|
AW_MONITORED_WINDOWS_HOSTNAME=HOST-EXAMPLE
|
|
AW_RUS_HEALTH_WORKTIME_API=http://127.0.0.1:5610
|
|
AW_RUS_HEALTH_STATE_DIR=/var/lib/activitywatch/health
|
|
AW_RUS_HEALTH_VALIDATION_DIR=/var/lib/activitywatch/health/windows-validation
|
|
AW_RUS_HEALTH_SESSION_EVENTS_MAX_AGE_SECONDS=86400
|
|
AW_RUS_HEALTH_GUARD_MAX_AGE_SECONDS=300
|
|
AW_RUS_HEALTH_GUARD_REQUIRED=1
|
|
AW_RUS_HEALTH_RDP_TCP_REQUIRED=true
|
|
AW_RUS_HEALTH_WRAPPER_TIMEOUT_SECONDS=90
|
|
AW_RUS_SLO_AW_BASE=http://127.0.0.1:5600
|
|
AW_RUS_SLO_WORKTIME_BASE=http://127.0.0.1:5610
|
|
AW_RUS_SLO_TARGET_PERCENT=99.97
|
|
AW_BROWSER_SMOKE_AW_BASE=http://127.0.0.1:5600
|
|
AW_BROWSER_SMOKE_WORKTIME_BASE=http://127.0.0.1:5610
|
|
AW_BROWSER_SMOKE_HOST=HOST-EXAMPLE
|
|
AW_BROWSER_SMOKE_OUTPUT_DIR=/var/lib/activitywatch/browser-smoke
|
|
AW_BROWSER_SMOKE_KEEP_RUNS=24
|
|
AW_BROWSER_SMOKE_ENGINE=chromium-cli
|
|
AW_BROWSER_SMOKE_TIMEOUT_MS=20000
|
|
AW_BROWSER_SMOKE_RENDER_TIMEOUT_MS=15000
|
|
|
|
# Hayabusa auto-case / alerting
|
|
AW_HAYABUSA_AUTO_CASE_ENABLED=true
|
|
AW_HAYABUSA_AUTO_CASE_MIN_SEVERITY=medium
|
|
AW_HAYABUSA_TELEGRAM_ENABLED=true
|
|
AW_HAYABUSA_TELEGRAM_MIN_SEVERITY=high
|
|
AW_HAYABUSA_TELEGRAM_BOT_TOKEN=
|
|
AW_HAYABUSA_TELEGRAM_CHAT_IDS=
|
|
AW_SECURITY_FINDING_INBOX_ENABLED=false
|
|
AW_SECURITY_FINDING_INBOX_REQUIRED=false
|
|
AW_SECURITY_FINDING_INBOX_BIN=/usr/local/bin/security-finding-inbox
|
|
AW_SECURITY_FINDING_INBOX_MIN_SEVERITY=medium
|
|
AW_SECURITY_FINDING_EXECUTOR_WORK_DIR=/var/lib/activitywatch/security-finding-executor
|
|
AW_SECURITY_FINDING_EXECUTOR_LOCK=/var/lock/aw-security-finding-executor.lock
|
|
AW_CONTAINMENT_ENGINE_BIN=/usr/local/bin/containment-engine
|
|
AW_CONTAINMENT_MANAGEMENT_ALLOWLIST=
|
|
AW_CONTAINMENT_BLOCKED_REMOTE_ADDRESSES=
|
|
|
|
# Integration Test Configuration
|
|
AW_INTEGRATION_TEST_ENABLED=false
|