igor04091968
9c01a2f297
CI / Rust checks (push) Waiting to run
CI / Docs and registry checks (push) Waiting to run
CI / Smoke checks (push) Waiting to run
Coverage / Coverage baseline (push) Waiting to run
Security / Cargo audit (push) Waiting to run
Security / Cargo deny (push) Waiting to run
Security / Secret pattern check (push) Waiting to run
Security / Dependency review (push) Waiting to run
139 lines
6.5 KiB
YAML
139 lines
6.5 KiB
YAML
aw_server_version: "v0.13.2"
|
|
aw_server_download_url: "https://github.com/ActivityWatch/activitywatch/releases/download/v0.13.2/activitywatch-v0.13.2-linux-x86_64.zip"
|
|
aw_server_bind_host: "0.0.0.0"
|
|
aw_server_port: 5600
|
|
aw_server_webui_dir: "/opt/activitywatch/webui-ru"
|
|
aw_server_data_dir: "/var/lib/activitywatch"
|
|
aw_server_db_path: "/var/lib/activitywatch/.local/share/activitywatch/aw-server-rust/sqlite.db"
|
|
aw_server_log_dir: "/var/log/activitywatch"
|
|
aw_server_user: "activitywatch"
|
|
aw_server_group: "activitywatch"
|
|
aw_server_inventory_host: "{{ (groups['aw_server'] | default([]) | first) | default('aw-server', true) }}"
|
|
aw_server_public_host: "{{ (hostvars[aw_server_inventory_host].ansible_host | default(aw_server_inventory_host, true)) if (aw_server_inventory_host | length) > 0 else 'aw-server' }}"
|
|
aw_worktime_report_base: "http://{{ aw_server_public_host }}:5610"
|
|
aw_worktime_timezone: "Europe/Moscow"
|
|
aw_worktime_events_limit: 250
|
|
aw_worktime_aw_http_timeout_seconds: 6
|
|
aw_worktime_events_cache_ttl_seconds: 300
|
|
aw_worktime_report_cache_ttl_seconds: 300
|
|
aw_worktime_report_stale_ttl_seconds: 3600
|
|
aw_worktime_report_disk_stale_ttl_seconds: 86400
|
|
aw_worktime_influx_enabled: false
|
|
aw_worktime_influx_url: "http://<INFLUXDB_HOST>:8086"
|
|
aw_worktime_influx_org: "proxmox"
|
|
aw_worktime_influx_bucket: "aw_metrics"
|
|
aw_worktime_influx_hosts: "HOST-EXAMPLE"
|
|
aw_worktime_influx_days: "today,yesterday"
|
|
aw_worktime_influx_token: ""
|
|
aw_worktime_management_history_dir: "{{ aw_server_data_dir }}/worktime-management-history"
|
|
aw_worktime_management_history_days: 31
|
|
aw_worktime_management_history_retention_days: 120
|
|
aw_worktime_manager_overload_coverage_pct: 115
|
|
aw_worktime_manager_trend_min_points: 3
|
|
aw_worktime_manager_trend_delta_pct: 10
|
|
aw_worktime_manager_off_hours_threshold_seconds: 1800
|
|
aw_worktime_interpretation_policy_path: "/etc/activitywatch/worktime-interpretation-policy.json"
|
|
aw_dlp_influx_enabled: false
|
|
aw_dlp_influx_url: "http://<INFLUXDB_HOST>:8086"
|
|
aw_dlp_influx_org: "proxmox"
|
|
aw_dlp_influx_bucket: "aw_metrics"
|
|
aw_dlp_influx_hosts: "HOST-EXAMPLE"
|
|
aw_dlp_influx_lookback_days: 30
|
|
aw_dlp_influx_event_limit: 2000
|
|
aw_dlp_influx_token: ""
|
|
aw_monitored_windows_host: "<WINDOWS_HOST>"
|
|
aw_monitored_windows_hostname: "HOST-EXAMPLE"
|
|
aw_worktime_host: "{{ aw_monitored_windows_hostname }}"
|
|
aw_rus_health_worktime_api_base: "http://127.0.0.1:5610"
|
|
aw_rus_health_state_dir: "{{ aw_server_data_dir }}/health"
|
|
aw_rus_health_validation_dir: "{{ aw_rus_health_state_dir }}/windows-validation"
|
|
aw_rus_health_rdp_tcp_required: true
|
|
aw_browser_smoke_enabled: true
|
|
aw_browser_smoke_engine: "chromium-cli"
|
|
aw_legacy_db_merge_enabled: false
|
|
aw_browser_smoke_timeout_ms: 20000
|
|
aw_browser_smoke_render_timeout_ms: 15000
|
|
aw_hayabusa_auto_case_enabled: true
|
|
aw_hayabusa_auto_case_min_severity: "medium"
|
|
aw_hayabusa_telegram_enabled: true
|
|
aw_hayabusa_telegram_min_severity: "high"
|
|
aw_hayabusa_telegram_bot_token: ""
|
|
aw_hayabusa_telegram_chat_ids: ""
|
|
aw_security_finding_inbox_enabled: false
|
|
aw_security_finding_inbox_required: false
|
|
aw_security_finding_inbox_bin: "/usr/local/bin/security-finding-inbox"
|
|
aw_security_finding_inbox_min_severity: "medium"
|
|
aw_security_finding_executor_work_dir: "{{ aw_server_data_dir }}/security-finding-executor"
|
|
aw_security_finding_executor_lock: "/var/lock/aw-security-finding-executor.lock"
|
|
aw_containment_engine_bin: "/usr/local/bin/containment-engine"
|
|
aw_containment_management_allowlist: ""
|
|
aw_containment_blocked_remote_addresses: ""
|
|
|
|
aw_repo_root: "{{ playbook_dir | dirname }}"
|
|
|
|
# Применить базовые категории и views для рабочего времени через AW settings API.
|
|
# При прод-обновлениях это нужно оставлять включённым, иначе UI остаётся без views/classes.
|
|
aw_apply_worktime_settings: true
|
|
|
|
# Дополнительные origin для aw-server-rust CORS.
|
|
# Обязательно включите тот origin, с которого реально открывается Web UI.
|
|
aw_server_cors_origins:
|
|
- "http://127.0.0.1:5600"
|
|
- "http://localhost:5600"
|
|
- "http://{{ aw_server_public_host }}:5600"
|
|
- "http://aw-server:5600"
|
|
|
|
# Опциональные значения периода рабочего времени в Web UI.
|
|
# startOfDay задаёт границу дня и стартовое время окна отчёта.
|
|
# durationDefault задаёт диапазон по умолчанию в секундах.
|
|
#
|
|
# Рекомендуется явно задать рабочий интервал и дать playbook вычислить duration.
|
|
aw_worktime_from: "00:00"
|
|
aw_worktime_to: "17:00"
|
|
aw_worktime_start_of_day: "{{ aw_worktime_from }}"
|
|
aw_server_always_active_pattern: "aw-watcher-window"
|
|
aw_server_landingpage: "/#/activity/HOST-EXAMPLE/view/"
|
|
aw_health_strict_fileops: 0
|
|
|
|
aw_dlp_profile: "core_only"
|
|
detmir_portal_dlp_profile: "core_only"
|
|
detmir_portal_dlp_module_enabled_override: false
|
|
aw_dlp_enabled: false
|
|
aw_dlp_disabled_reason: "operator_disabled_to_reduce_proxmox_influx_grafana_clickhouse_load"
|
|
aw_dlp_disabled_since: ""
|
|
aw_dlp_light_collector_enabled: false
|
|
aw_dlp_light_guard_enabled: true
|
|
aw_dlp_light_guard_load_ratio: "1.50"
|
|
aw_dlp_light_guard_mem_available_pct_min: "15"
|
|
aw_dlp_light_guard_iowait_pct_max: "20"
|
|
aw_dlp_light_guard_strikes_required: 3
|
|
aw_dlp_light_guard_state_dir: "{{ aw_server_data_dir }}/health"
|
|
aw_dlp_aggregator_bucket_prefixes: "aw-file-operations_,aw-dlp-incidents_"
|
|
aw_dlp_aggregator_limit: 500
|
|
aw_dlp_aggregator_lookback_hours: 2
|
|
aw_dlp_aggregator_overlap_seconds: 60
|
|
aw_dlp_aggregator_timeout_seconds: 8
|
|
aw_dlp_aggregator_on_calendar: "*:3/15:10"
|
|
aw_dlp_aggregator_cpu_quota: "10%"
|
|
aw_dlp_aggregator_memory_max: "256M"
|
|
aw_containment_enabled: false
|
|
aw_containment_mode: "shadow"
|
|
aw_containment_policy_path: "/etc/activitywatch/containment-policy.json"
|
|
aw_containment_default_ttl_minutes: 60
|
|
aw_containment_require_admin_channel_check: true
|
|
aw_containment_allow_auto_for_servers: false
|
|
aw_dlp_policy_engine_enabled: false
|
|
aw_dlp_policy_engine_bind_host: "0.0.0.0"
|
|
aw_dlp_policy_engine_port: 5601
|
|
aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"
|
|
aw_dlp_content_analysis_enabled: false
|
|
aw_dlp_integrations_enabled: false
|
|
aw_dlp_case_management_enabled: false
|
|
aw_dlp_case_bind_host: "0.0.0.0"
|
|
aw_dlp_case_port: 5602
|
|
aw_dlp_case_db_path: "/opt/activitywatch/dlp-case-management/cases.db"
|
|
aw_dlp_compliance_enabled: false
|
|
aw_dlp_compliance_report_dir: "/opt/activitywatch/dlp-compliance/reports"
|
|
aw_dlp_compliance_template_path: "/opt/activitywatch/dlp-compliance/templates/152-fz-report.html"
|
|
aw_server_post_deploy_health_check_enabled: true
|