.dev.env.example

# =============================================================================
# EDR Local Development Environment Template (.dev.env)
# Usage:
#   cp .dev.env.example .env
#   # Adjust values below if you have a custom setup
# =============================================================================

# ── Fleet Server Settings ──────────────────────────────────────────────────────
# Host/Port the gRPC service will listen on (0.0.0.0 to bind on all interfaces)
HOST=0.0.0.0
PORT=50051

# Secret key used to sign and verify node authorization JWT tokens.
# Change this in staging/production!
JWT_SECRET=dev-jwt-secret-key-do-not-use-in-production-12345

# Logging configuration for fleet-server
RUST_LOG=debug
LOG_FORMAT=human

# ── Database Connections ─────────────────────────────────────────────────────
# PostgreSQL instance for fleet node registrations (managed by infra/docker-compose.yml)
# Default port is 5433 for nodes DB
DATABASE_URL=postgres://edr:changeme@127.0.0.1:5433/edr_nodes

# ── Kafka Configuration ──────────────────────────────────────────────────────
# Kafka brokers list (using 127.0.0.1 explicitly to bypass IPv6 resolution delays/bugs on local Docker setups)
KAFKA_BROKERS=127.0.0.1:9092

# Raw telemetry ingestion topic
KAFKA_TOPIC_AGENTS_EVENTS=edr.events.raw

# Note: The Kafka Web UI is accessible in your browser at http://localhost:8090

# ── Agent Settings ───────────────────────────────────────────────────────────
# Config path override for running the EDR agent locally without sudo installation.
# By setting this, 'cargo run --bin edr-agent' will load this config file automatically.
EDR_AGENT_CONFIG=agent/agent.toml

# Logging configuration for the agent
AGENT_RUST_LOG=debug