[agent]
socket_path = "/run/netbox-store-agent/agent.sock"
journal_path = "/var/lib/netbox-store-agent/journal.sqlite3"
lock_path = "/run/lock/netbox-store-agent.lifecycle.lock"
backup_dir = "/var/lib/netbox-store-agent/backups"
dry_run = true
require_root = true
require_peer_credentials = true
# Replace/add the numeric UID or effective GID used by the NetBox service.
allowed_peer_uids = [0]
allowed_peer_gids = [0]
socket_mode = 0o660
socket_uid = 0
socket_gid = 0
max_request_bytes = 65536
connection_timeout_seconds = 5
worker_threads = 1

[store]
base_url = "https://netbox.mrblake.cc"
plugin_endpoint_template = "/api/v1/plugins/{plugin_slug}/"
release_endpoint_template = "/api/v1/plugins/{plugin_slug}/releases/{version}/"
timeout_seconds = 10
max_catalog_bytes = 1048576
max_artifact_bytes = 268435456
allow_private_addresses = false
allow_http_for_testing = false
# Add an artifact origin only when releases intentionally use that origin.
allowed_hosts = ["netbox.mrblake.cc", "git.mrblake.cc", "github.com", "codeload.github.com"]
# bearer_token_file = "/etc/netbox-store-agent/store.token"
# ca_file = "/etc/ssl/certs/internal-store-ca.pem"

[paths]
allowed_root = "/opt/netbox"
include_path = "/opt/netbox/netbox/netbox/store_plugins.py"
requirements_path = "/opt/netbox/local_requirements_store.txt"
temp_dir = "/var/lib/netbox-store-agent/tmp"

[commands]
python_path = "/opt/netbox/venv/bin/python"
manage_path = "/opt/netbox/netbox/manage.py"
systemctl_path = "/usr/bin/systemctl"
services = ["netbox", "netbox-rq"]
command_timeout_seconds = 900
unshare_path = "/usr/bin/unshare"
setpriv_path = "/usr/bin/setpriv"
# Dedicated unprivileged account used only for reviewed source builds.
source_build_uid = 65534
source_build_gid = 65534

[policy]
netbox_version = "4.6.8"
min_supported_netbox = "4.6.5"
max_supported_netbox = "4.6.8"
self_plugin_slugs = ["netbox-store", "netbox-plugin-store", "netbox_plugin_store"]
allow_prereleases = false
require_release_for_enable = true