config.agent.yaml

# usulnet Agent Configuration
# This file is deployed to remote hosts during agent auto-deploy.
# Values are populated by the master during deployment.

# Gateway NATS URL (master's NATS address)
# Use natss:// for TLS (default, self-signed CA) or nats:// for plain
gateway_url: "natss://master:4222"

# Agent authentication token (generated by master)
token: ""

# Docker daemon address
# For rootless Docker, use: "unix:///run/user/<UID>/docker.sock"
# Can also be set via DOCKER_HOST env var.
docker_host: "unix:///var/run/docker.sock"

# Agent hostname (auto-detected if empty)
hostname: ""

# Agent ID (auto-generated if empty)
agent_id: ""

# Custom labels for this agent
labels: {}

# Local state directory
data_dir: "/app/data"

# Logging
log_level: "info"
log_format: "json"

# TLS configuration for NATS
# When using natss:// URL scheme, TLS is auto-enabled with InsecureSkipVerify
# (self-signed CA). For production with custom CA, enable explicit TLS below.
# tls:
#   enabled: true
#   cert_file: "/app/certs/agent.crt"   # Client cert (for mTLS)
#   key_file: "/app/certs/agent.key"    # Client key (for mTLS)
#   ca_file: "/app/certs/ca.crt"        # CA cert (for server verification)