igor04091968
fe87c85a31
CI / Rust checks (push) Waiting to run
CI / Docs and registry checks (push) Waiting to run
CI / Smoke checks (push) Waiting to run
Coverage / Coverage baseline (push) Waiting to run
Security / Cargo audit (push) Waiting to run
Security / Cargo deny (push) Waiting to run
Security / Secret pattern check (push) Waiting to run
Security / Dependency review (push) Waiting to run
- default DetMir DLP runtime to core_only/disabled with load-guard protection - add fail-closed placeholder validation and runtime-scoped artifact checks - document operator re-enable flow for light profile and guard rollback - update prod docs, env examples, and Ansible DLP defaults
122 lines
5.2 KiB
YAML
122 lines
5.2 KiB
YAML
aw_server_version: "v0.13.2"
|
|
aw_server_download_url: "https://github.com/ActivityWatch/activitywatch/releases/download/v0.13.2/activitywatch-v0.13.2-linux-x86_64.zip"
|
|
aw_server_bind_host: "0.0.0.0"
|
|
aw_server_port: 5600
|
|
aw_server_webui_dir: "/opt/activitywatch/webui-ru"
|
|
aw_server_data_dir: "/var/lib/activitywatch"
|
|
aw_server_log_dir: "/var/log/activitywatch"
|
|
aw_server_db_path: "/var/lib/activitywatch/aw-server-rust/sqlite.db"
|
|
aw_server_user: "activitywatch"
|
|
aw_server_group: "activitywatch"
|
|
aw_server_inventory_host: "{{ (groups['aw_server'] | default([]) | first) | default('aw-server', true) }}"
|
|
aw_server_public_host: "{{ (hostvars[aw_server_inventory_host].ansible_host | default(aw_server_inventory_host, true)) if (aw_server_inventory_host | length) > 0 else 'aw-server' }}"
|
|
aw_worktime_report_base: "http://{{ aw_server_public_host }}:5610"
|
|
aw_worktime_timezone: "Europe/Moscow"
|
|
aw_worktime_events_limit: 250
|
|
aw_worktime_aw_http_timeout_seconds: 6
|
|
aw_worktime_events_cache_ttl_seconds: 300
|
|
aw_worktime_report_cache_ttl_seconds: 300
|
|
aw_worktime_report_stale_ttl_seconds: 3600
|
|
aw_worktime_report_disk_stale_ttl_seconds: 86400
|
|
aw_worktime_influx_enabled: true
|
|
aw_worktime_influx_url: "http://192.0.2.10:8086"
|
|
aw_worktime_influx_org: "proxmox"
|
|
aw_worktime_influx_bucket: "aw_metrics"
|
|
aw_worktime_influx_hosts: "HOST-EXAMPLE"
|
|
aw_worktime_influx_days: "today,yesterday"
|
|
aw_worktime_influx_token: "{{ lookup('env', 'AW_WORKTIME_INFLUX_TOKEN') }}"
|
|
aw_worktime_management_history_dir: "{{ aw_server_data_dir }}/worktime-management-history"
|
|
aw_worktime_management_history_days: 31
|
|
aw_worktime_management_history_retention_days: 120
|
|
aw_worktime_manager_overload_coverage_pct: 115
|
|
aw_worktime_manager_trend_min_points: 3
|
|
aw_worktime_manager_trend_delta_pct: 10
|
|
aw_worktime_manager_off_hours_threshold_seconds: 1800
|
|
aw_worktime_interpretation_policy_path: "/etc/activitywatch/worktime-interpretation-policy.json"
|
|
aw_dlp_profile: "core_only"
|
|
detmir_portal_dlp_profile: "light"
|
|
detmir_portal_dlp_module_enabled_override: true
|
|
aw_dlp_influx_enabled: false
|
|
aw_dlp_influx_url: "http://192.0.2.10:8086"
|
|
aw_dlp_influx_org: "proxmox"
|
|
aw_dlp_influx_bucket: "aw_metrics"
|
|
aw_dlp_influx_hosts: "HOST-EXAMPLE"
|
|
aw_dlp_influx_lookback_days: 30
|
|
aw_dlp_influx_event_limit: 2000
|
|
aw_dlp_influx_token: "{{ lookup('env', 'AW_DLP_INFLUX_TOKEN') }}"
|
|
aw_monitored_windows_host: "198.51.100.18"
|
|
aw_monitored_windows_hostname: "HOST-EXAMPLE"
|
|
aw_worktime_host: "{{ aw_monitored_windows_hostname }}"
|
|
aw_rus_health_worktime_api_base: "http://127.0.0.1:5610"
|
|
aw_rus_health_state_dir: "{{ aw_server_data_dir }}/health"
|
|
aw_rus_health_validation_dir: "{{ aw_rus_health_state_dir }}/windows-validation"
|
|
aw_rus_health_rdp_tcp_required: false
|
|
aw_hayabusa_auto_case_enabled: true
|
|
aw_hayabusa_auto_case_min_severity: "medium"
|
|
aw_hayabusa_telegram_enabled: true
|
|
aw_hayabusa_telegram_min_severity: "high"
|
|
aw_hayabusa_telegram_bot_token: ""
|
|
aw_hayabusa_telegram_chat_ids: ""
|
|
|
|
aw_repo_root: "/mnt/usb_hdd2/Projects/ActivityWatch-Russian"
|
|
|
|
aw_server_cors_origins:
|
|
- "http://127.0.0.1:5600"
|
|
- "http://localhost:5600"
|
|
- "http://{{ aw_server_public_host }}:5600"
|
|
- "http://aw-server:5600"
|
|
- "http://snb-live:5600"
|
|
|
|
aw_apply_worktime_settings: true
|
|
|
|
aw_dlp_ioc_enabled: false
|
|
aw_dlp_enabled: false
|
|
aw_dlp_disabled_reason: ""
|
|
aw_dlp_disabled_since: ""
|
|
aw_dlp_light_collector_enabled: false
|
|
aw_dlp_light_guard_enabled: true
|
|
aw_dlp_light_guard_load_ratio: "1.50"
|
|
aw_dlp_light_guard_mem_available_pct_min: "15"
|
|
aw_dlp_light_guard_iowait_pct_max: "20"
|
|
aw_dlp_light_guard_strikes_required: 3
|
|
aw_dlp_light_guard_state_dir: "{{ aw_server_data_dir }}/health"
|
|
aw_dlp_aggregator_bucket_prefixes: "aw-file-operations_,aw-dlp-incidents_"
|
|
aw_dlp_aggregator_limit: 500
|
|
aw_dlp_aggregator_lookback_hours: 2
|
|
aw_dlp_aggregator_overlap_seconds: 60
|
|
aw_dlp_aggregator_timeout_seconds: 8
|
|
aw_dlp_aggregator_on_calendar: "*:3/15:10"
|
|
aw_dlp_aggregator_cpu_quota: "10%"
|
|
aw_dlp_aggregator_memory_max: "256M"
|
|
aw_containment_enabled: false
|
|
aw_containment_mode: "shadow"
|
|
aw_containment_policy_path: "/etc/activitywatch/containment-policy.json"
|
|
aw_containment_default_ttl_minutes: 60
|
|
aw_containment_require_admin_channel_check: true
|
|
aw_containment_allow_auto_for_servers: false
|
|
aw_dlp_ioc_workdir: "/opt/activitywatch/dlp-ioc"
|
|
aw_dlp_ioc_rules_zip_url: "https://github.com/Yamato-Security/hayabusa-rules/archive/refs/heads/main.zip"
|
|
aw_dlp_ioc_refresh_on_boot_sec: "5min"
|
|
aw_dlp_ioc_refresh_interval: "6h"
|
|
aw_dlp_policy_engine_enabled: false
|
|
aw_dlp_policy_engine_bind_host: "0.0.0.0"
|
|
aw_dlp_policy_engine_port: 5601
|
|
aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"
|
|
aw_dlp_content_analysis_enabled: false
|
|
aw_dlp_integrations_enabled: false
|
|
aw_dlp_case_management_enabled: false
|
|
aw_dlp_case_bind_host: "0.0.0.0"
|
|
aw_dlp_case_port: 5602
|
|
aw_dlp_case_db_path: "/opt/activitywatch/dlp-case-management/cases.db"
|
|
aw_dlp_compliance_enabled: false
|
|
aw_dlp_compliance_report_dir: "/opt/activitywatch/dlp-compliance/reports"
|
|
aw_dlp_compliance_template_path: "/opt/activitywatch/dlp-compliance/templates/152-fz-report.html"
|
|
aw_server_post_deploy_health_check_enabled: true
|
|
|
|
aw_worktime_from: "00:00"
|
|
aw_worktime_to: "17:00"
|
|
aw_worktime_start_of_day: "{{ aw_worktime_from }}"
|
|
aw_server_always_active_pattern: "aw-watcher-window"
|
|
aw_server_landingpage: "/#/activity/HOST-EXAMPLE/view/"
|
|
aw_health_strict_fileops: 0
|