WantasticCore/config.example.yaml at main · WantasticApp/WantasticCore · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
# ============================================================================
# WantasticCore Configuration
# ============================================================================
# This file is generated on first run by the interactive setup wizard.
# Edit and restart wantastic-core to apply changes.
#
# Secrets that should NOT be in source control in production:
#   - database.password
#   - tenant.session_signing_key
#   - hooks.secret_key
#   - smtp.password (if SMTP enabled)
#   - adminbot.claude.api_key (if adminbot enabled)

server:
  grpc_addr: ":50051"
  metrics_addr: ":9091"
  websocket_addr: ":8081"
  winbox_addr: ":8291"
  debug: false

network:
  subnet_pools:
    - "10.0.0.0/8"
    - "172.16.0.0/12"
  shared_port: 51820
  server_endpoint: "localhost"

auth:
  enable: true
  allowed_origins:
    - "localhost:8001"
  mtls:
    cert_dir: "./certs"
    auto_generate: true

metrics:
  update_interval: "30s"

database:
  host: "localhost"
  port: 5432
  user: "wantastic"
  password: "mysecretpassword"
  database: "wantastic_dev"
  ssl_mode: "disable"
  pool_size: 10
  min_idle_conns: 2
  max_retries: 3

redis:
  enabled: true
  addr: "localhost:6379"
  password: ""
  db: 0

# SMTP — optional. Used for password-reset emails and admin notifications.
smtp:
  enabled: false
  host: ""
  port: 587
  use_tls: true
  user: ""
  password: ""
  from: ""
  from_name: "Wantastic"

# Tenant — minimal after the admin-managed rewrite.
# Self-registration, plans, and billing were removed.
tenant:
  session_signing_key: "" # 64-hex-char random; generated by the setup wizard

# Service endpoints (peer-facing).
endpoints:
  winbox_server: "localhost"
  wireguard_server: "localhost"

# Auth0 Device Authorization Grant (RFC 8628) — optional.
auth0:
  enabled: false
  domain: ""
  client_id: ""
  audience: ""

# Notification hook URLs.
hooks:
  base_url: "http://localhost:8001/hooks"
  secret_key: "" # 64-hex-char random; generated by the setup wizard
  token_expiry: "168h"

# AdminBot (WhatsApp tooling) — optional.
adminbot:
  enabled: false
  bot_name: "wantastic-adminbot"
  log_level: "info"
  whatsapp:
    store_path: "/var/lib/wantastic/adminbot/whatsapp.db"
    login_timeout: "5m"
    device_name: "WantasticBot"
    history_window: "24h"
    allowed_groups: []
    reply_signature_enabled: true
  claude:
    api_key: ""