# Charybdis Configuration
# Test configuration with security disabled

[server]
grpc_host = "0.0.0.0"  # Listen on all interfaces for Docker
grpc_port = 50051

[server.yaml_adapter]
enabled = true
host = "0.0.0.0"
port = 8080

[database]
url = "${DATABASE_URL}"
max_connections = 10
connection_timeout_secs = 30

[security.mtls]
enabled = false

[security.rbac]
enabled = false

[security.rbac.audit]
enabled = true
log_all_requests = true
log_denied_requests = true

[telemetry]
service_name = "charybdis"
service_version = "0.1.0"
environment = "development"
enable_console = true

[telemetry.otlp]
enabled = false

[telemetry.traces]
sampler_ratio = 1.0

[telemetry.metrics]
export_interval_secs = 60

[telemetry.logs]
level = "info"
json_format = false

[plugins.defectdojo]
enabled = true
base_url = "${DEFECTDOJO_API_URL:-http://defectdojo-uwsgi:8081}"
api_token = "${DEFECTDOJO_API_TOKEN:-changeme}"
default_product_type_id = 1

[plugins.defectdojo.owner_resolution]
user_email_annotation = "keycloak.com/email"
defectdojo_lookup_field = "email"
assign_all_members = true

[plugins.defectdojo.default_engagement]
auto_create = true
name = "CI/CD Pipeline"
engagement_type = "CI/CD"

[plugins.keycloak]
enabled = true
base_url = "${KEYCLOAK_URL:-http://keycloak:8080}"
realm = "charybdis"
client_id = "charybdis-sync"
client_secret = "charybdis-sync-secret"

[plugins.keycloak.sync]
on_startup = true
sync_users = true
sync_groups = true
namespace = "keycloak"

[plugins.dependencytrack]
enabled = false