pal/pal.yml at main · marshyski/pal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
global:
  # Timezone to use for cron style scheduled jobs and logs, UTC by default
  timezone: "America/New_York"
  # Container runtime command docker, podman, finch, nerdctl supported, default: podman
  container_cmd: docker
  # Prefix for command.Exec merged with actionData.cmd after cmd prefix
  cmd_prefix: "/bin/sh -c"
  # Working Directory
  working_dir: ./
  # Debug mode
  debug: true

http:
  # Listen address 127.0.0.1:8443 or 0.0.0.0:8443
  listen: 127.0.0.1:8443
  # Listen with IPv6 instead of IPv4
  ipv6: false
  # HTTP timeout in minutes for long running processes
  timeout_min: 10
  # HTTP max content-length size in megabyte (MB)
  body_limit: 90
  # Number requests-per-second rate limter for all requests
  req_per_sec: 30
  # HTTP session cookie max-age, default 3600 / 1 hour
  max_age: 3600
  # TLS private key
  key: "./localhost.key"
  # TLS cert
  cert: "./localhost.pem"
  # Optional response headers on all requests
  headers:
    - header: Access-Control-Allow-Origin
      value: "https://127.0.0.1:8443,https://localhost:8443"
  # Session cookie secret, if blank auto generated (need to clear cookies each restart)
  session_secret: "P@llY^S3$$h"
  # Enable unauth Prometheus metrics at /v1/pal/metrics
  prometheus: false
  # Disable UI is to turn on or off the UI
  disable_ui: false
  # UI upload directory
  upload_dir: ./upload
  # User auth with roles enabled
  users:
    - user: pal
      pass: p@LLy5
      role: admin
    - user: exec
      pass: p@LLy5
      role: execute
    - user: read
      pass: p@LLy5
      role: read

db:
  # BadgerDB SECRET DO NOT SHARE
  encrypt_key: "8c755319-fd2a-4a89-b0d9-ae7b8d26"
  # Local path to database file
  path: "./pal.db"
  # Do not persist data on-disk and only store in-memory
  in_memory: false

notifications:
  # Max number of notifications to keep
  store_max: 100
  # Webhooks OnError or OnSuccess webhooks triggers
  webhooks:
    - name: pal
      url: "https://127.0.0.1:8443/v1/pal/notifications"
      method: PUT
      insecure: true
      headers:
        - header: "Authorization"
          value: "Basic cGFsOnBATEx5NQ=="
        - header: "Content-type"
          value: "application/json"
      body: '{"notification":"$PAL_GROUP/$PAL_ACTION INPUT=$PAL_INPUT STATUS=$PAL_STATUS OUTPUT=$PAL_OUTPUT WEBHOOK","group":"test"}'