# MCP Agent configuration
#
# Default location: /srv/mcp/mcp-agent.toml
# Override with: mcp-agent server --config /path/to/mcp-agent.toml

# ------------------------------------------------------------------
# gRPC server
# ------------------------------------------------------------------
[server]
# Listen address for the gRPC server. Bind to the overlay network
# interface only -- the agent does not sit behind mc-proxy.
# Env override: MCP_AGENT_SERVER_GRPC_ADDR
grpc_addr = "100.95.252.120:9444"

# TLS certificate and private key for the gRPC server. The certificate
# should be issued by the Metacrypt CA and valid for the overlay IP.
# Env overrides: MCP_AGENT_SERVER_TLS_CERT, MCP_AGENT_SERVER_TLS_KEY
tls_cert = "/srv/mcp/certs/mcp-agent.crt"
tls_key  = "/srv/mcp/certs/mcp-agent.key"

# ------------------------------------------------------------------
# Database
# ------------------------------------------------------------------
[database]
# Path to the SQLite database. The agent stores desired state, observed
# state, deployed specs, and events here. WAL mode, foreign keys on.
# Env override: MCP_AGENT_DATABASE_PATH
path = "/srv/mcp/mcp.db"

# ------------------------------------------------------------------
# MCIAS authentication
# ------------------------------------------------------------------
[mcias]
# URL of the MCIAS server used to validate bearer tokens from the CLI.
server_url = "https://mcias.svc.mcp.metacircular.net:8443"

# Path to the CA certificate that signed the MCIAS TLS certificate.
# If empty, the system trust store is used.
ca_cert = "/usr/local/share/ca-certificates/metacircular-ca.crt"

# Service name presented to MCIAS during token validation. Must match
# a service registered in MCIAS.
service_name = "mcp"

# ------------------------------------------------------------------
# Agent settings
# ------------------------------------------------------------------
[agent]
# Unique name for this node. Must match the name used in [[nodes]]
# entries in the CLI config.
# Env override: MCP_AGENT_NODE_NAME
node_name = "rift"

# Container runtime binary. Currently only "podman" is supported.
# Env override: MCP_AGENT_CONTAINER_RUNTIME
container_runtime = "podman"

# ------------------------------------------------------------------
# Monitoring
# ------------------------------------------------------------------
[monitor]
# How often the monitor checks container state against desired state.
# Default: 60s
interval = "60s"

# Command to execute when an alert fires. Uses exec-style invocation
# (argv array, no shell). The alert message is passed as the final
# argument. Omit to disable alerting.
# alert_command = ["/usr/local/bin/notify", "--channel", "ops"]

# Minimum time between repeated alerts for the same condition.
# Default: 15m
cooldown = "15m"

# Number of state transitions within flap_window that triggers a
# flapping alert. Default: 3
flap_threshold = 3

# Time window for flap detection. Default: 10m
flap_window = "10m"

# How long to retain event records in the database. Default: 30d
retention = "30d"

# ------------------------------------------------------------------
# Logging
# ------------------------------------------------------------------
[log]
# Log level: debug, info, warn, error. Default: info
# Env override: MCP_AGENT_LOG_LEVEL
level = "info"