agent/config.example.yaml at main · thand-io/agent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
# Thand Backend Configuration

# Environment Configuration
environment:
  # Supported platforms: gcp, aws, azure, local
  platform: "local"
  # Platform-specific config
  config:
    # Local environment does not require additional configuration
    # Add any local-specific settings here if needed
    salt: "changeme"
    password: "changeme"

# Services Configuration
services:
  temporal:
    host: "localhost"
    port: 7233
    namespace: "default"

    # Choose ONE authentication method:

    # 1. API Key (Temporal Cloud)
    # api_key: "your-api-key"

    # 2. Inline certificates
    # mtls_cert: "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"
    # mtls_key: "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----"

    # 3. File paths (Kubernetes)
    # mtls_cert_file: "/etc/temporal/certs/client.pem"
    # mtls_key_file: "/etc/temporal/certs/client.key"

    # 4. Vault (Production)
    # mtls_vault:
    #   mtls_vault_name: "temporal-client-cert"
    #   mtls_vault_type: "pem"  # pem, pkcs12, or auto-detect
    #   mtls_vault_password: ""  # For encrypted PKCS12

# Server Configuration
server:
  host: "0.0.0.0"
  port: 5225

  limit:
    requests_per_minute: 100
    burst: 10
    read_timeout: 30s
    write_timeout: 30s
    idle_timeout: 120s

  capabilities:
    elevations:
      static:
        enabled: true
      dynamic:
        enabled: true
      llm:
        enabled: true

  security:
    cors:
      allowed_origins:
        - "https://*.app.thand.io"
      allowed_methods:
        - "GET"
        - "POST"
        - "PUT"
        - "DELETE"
        - "OPTIONS"
      allowed_headers:
        - "Authorization"
        - "Content-Type"
        - "X-Requested-With"
      max_age: 86400

    # Metrics Configuration
    metrics:
      enabled: true
      path: "/metrics"
      namespace: "thand"

    # Health Check Configuration
    health:
      path: "/health"


# Logging Configuration
logging:
  level: "info" # debug, info, warn, error
  format: "json" # json, text
  output: "stdout" # stdout, stderr, file path

providers:
  # Define your providers here
  # url: "https://api.example.com/providers.yaml"
  # path: ./path/to/providers

  # Or define inline providers
  # provider1:
  #   type: "type1"
  #   enabled: true

roles:
  # Define your roles here

workflows:
  # Define your workflows here