# Sparse operator config for the real xiaoO E2E case.
# Omitted fields inherit OperatorDocument defaults at --config load time.

[control]
socket_path = "/tmp/actrail-agent-xiaoo-rustls.sock"
pid_file = "/tmp/actrail-agent-xiaoo-rustls.pid"
log_path = "/tmp/actrail-agent-xiaoo-rustls.log"

[storage.sqlite]
path = "/tmp/actrail-agent-xiaoo-rustls.sqlite"

[web]
listen_addr = "127.0.0.1:18092"

[export.snapshot]
directory = "/tmp/actrail-agent-xiaoo-rustls-export"

[capture]
profile_name = "agent-xiaoo-rustls"
capabilities = [
    "proc-lifecycle",
    "net-transport",
    "socket-plaintext-payload",
    "tls-plaintext-payload",
    "net-application-plaintext-http",
]

[payload.tls]
sync_event_socket_path = "/tmp/actrail-agent-xiaoo-rustls-tls-sync.sock"
retention_max_bytes_per_trace = 10485760
redaction_policy = "authorization-header"

[payload.stdio]
enabled = false
retention_max_bytes_per_trace = 10485760
redaction_policy = "authorization-header"

[payload.socket]
retention_max_bytes_per_trace = 10485760
redaction_policy = "authorization-header"
http_sniff_max_bytes = 8192

[process_seccomp]
enabled = false

[enforcement]
rules_path = "/tmp/actrail-agent-xiaoo-rustls-enforcement.conf"