pmg:
  base_packages:
    - curl
    - vim-tiny
    - rsync
    - ca-certificates
    - jq

  ssh_allow_users: []
  ssh_password_authentication: true

  journald_system_max_use: 1G
  journald_max_file_sec: 1month

  node_exporter:
    enabled: true
    package: prometheus-node-exporter
    service: prometheus-node-exporter
    textfile_directory: /var/lib/prometheus/node-exporter
    args: --collector.textfile.directory=/var/lib/prometheus/node-exporter

  smtp_monitoring:
    enabled: true
    log_window_seconds: 300
    ports:
      - 25
      - 26
    blackbox:
      package: prometheus-blackbox-exporter
      service: prometheus-blackbox-exporter

  pmg_services:
    - postfix
    - pmg-smtp-filter
    - pmgpolicy
    - pmgdaemon
    - pmgmirror
    - pmgtunnel
  pmg_cluster_only_services:
    - pmgmirror
    - pmgtunnel
  cluster_join:
    enabled: true
    master_ip: 10.80.38.152
    fingerprint: "4C:63:ED:BB:01:F0:63:5B:92:AC:37:D8:52:D9:0A:CB:5B:78:EE:3A:36:83:86:29:C8:19:D2:EC:CE:AC:88:EC"
    password: ""
  update_dist_upgrade: true
  update_auto_reboot: false
  update_reboot_delay_minutes: 1

  custom_check:
    enabled: true
    script_path: /usr/local/bin/pmg-custom-check
    log_dir: /var/log/mail_av
    log_dir_user: pmg-smtp-filter
    log_dir_group: pmg
    log_dir_mode: "0770"
    log_file_mode: "0660"
    managed_packages:
      - pwgen
    ksc_superuser:
      enabled: true
      name: superuser
      manage_sudoers: true
    required_services:
      - kesl
      - klnagent64
    kesl_excluded_paths:
      - /var/spool/pmg
      - /var/lib/clamav
      - /tmp/.proxdump_*

  manage_hosts_file: false
  hosts_file_entries:
    - ip: 10.80.38.152
      hostname: p-mailgw-x1-01
      aliases:
        - p-mailgw-x1-01.lmru.tech
    - ip: 10.80.38.153
      hostname: p-mailgw-x1-02
      aliases:
        - p-mailgw-x1-02.lmru.tech
    - ip: 10.220.41.152
      hostname: p-mailgw-x2-01
      aliases:
        - p-mailgw-x2-01.lmru.tech
    - ip: 10.220.41.153
      hostname: p-mailgw-x2-02
      aliases:
        - p-mailgw-x2-02.lmru.tech

  wazuh:
    enabled: true
    version: 4.14.0-1
    manager: 10.80.120.205
    group: test_auditd_unix

  kesl:
    enabled: true
    package_url: https://products.s.kaspersky-labs.com/endpoints/keslinux10/12.4.0.1225/multilanguage-INT-12.4.0.1225/167a2f9c5bdb4e869f4603fbc3a829c1/kesl_12.4.0-1225_amd64.deb
    package_path: /opt/kesl_12.4.0-1225_amd64.deb
    autoinstall_path: /etc/opt/kaspersky/kesl/autoinstall.ini
    ksvla_mode: "No"
    endpoint_agent_mode: "No"
    eula_agreed: "Yes"
    privacy_policy_agreed: "Yes"
    use_ksn: "No"
    group_clean: "No"
    locale: ""
    install_license: ""
    updater_source: SCServer
    update_execute: "No"

  klnagent:
    enabled: true
    package_url: https://products.s.kaspersky-labs.com/administrationkit/ksc10/16.2.0.1023/russian-INT-29664057-ru/2129c97dba254c9fb8a4161f29a2241c/klnagent64_16.2.0-1023_amd64.deb
    package_path: /opt/klnagent64_16.2.0-1023_amd64.deb
    administration_server: 10.80.38.76
    autoanswers_path: /etc/opt/kaspersky/klnagent64/autoanswers.conf
    autoinstall: true
    eula_accepted: true

  qualys:
    enabled: true
    package_url: https://storage.yandexcloud.net/qualys-agent/QualysCloudAgent.deb
    package_path: /opt/QualysCloudAgent.deb
    activation_id: 5eb9ad8e-02cc-431a-9afb-b8caad175ec1
    customer_id: 4d868109-dad3-5536-82b4-9f3a6f3010bc
    server_uri: https://qagpublic.qg1.apps.qualys.eu/CloudAgent/