config.example.yaml

# pktFlow configuration
# Copy to config.yaml alongside the app, or set PKTFLOW_CONFIG=/path/to/config.yaml
#
# All of these can also be set via PKTFLOW_* environment variables instead of
# editing this file (e.g. PKTFLOW_SECRET_KEY, PKTFLOW_DB_PATH).
#
# Copy to config.yaml and edit before starting the service.
# Most runtime settings (storage backend, retention, notifications, etc.) are
# managed via the Settings page in the UI and stored in SQLite.
# This file only covers infrastructure/startup settings.

# ── Server ────────────────────────────────────────────────────────────────────
host: "0.0.0.0"
port: 8766
workers: 2
debug: false

# ── SQLite app database ────────────────────────────────────────────────────────
db_path: "/opt/pktflow/pktflow.db"

# ── ClickHouse ────────────────────────────────────────────────────────────────
clickhouse_host: "localhost"
clickhouse_port: 9000
clickhouse_database: "pktflow"
clickhouse_user: "default"
clickhouse_password: ""

# ── DuckDB (only if using DuckDB backend) ─────────────────────────────────────
duckdb_path: "/opt/pktflow/flows.duckdb"

# ── JWT (CHANGE THIS in production — generate with: openssl rand -hex 32) ────
secret_key: "CHANGE_ME_generate_with_openssl_rand_hex_32"

# ── Credential encryption key (generate with the Fernet command below) ───────
# python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
credential_key: "CHANGE_ME_generate_with_fernet_generate_key"

# ── First-run admin seed (creates admin user if no users exist) ───────────────
# admin_user: "admin"
# admin_password: "changeme"

# ── CORS (restrict to your actual dashboard origin in production) ─────────────
cors_origins:
  - "*"

# ── Logging ───────────────────────────────────────────────────────────────────
log_level: "info"
log_file: "/opt/pktflow/logs/pktflow.log"