tmp_stale_hours = 72
socket_path = "/tmp/system-monitor/agent-guard.sock"
dev_port_allowlist = ["3000-9999", "5173", "4321", "6006"]
# Tailscale Peer API and tailnet services bind to CGNAT/ULA addresses.
trusted_host_cidrs = ["100.64.0.0/10", "fd7a:115c:a1e0::/48"]
build_allowlist = ["tsc", "vite", "esbuild", "rollup", "webpack", "turbo", "pnpm", "npm", "yarn", "node", "cargo", "rustc", "cc", "clang", "gcc", "ld", "make", "ninja", "go", "bun"]
protect = ["systemd", "systemd-oomd", "pipewire", "pipewire-pulse", "wireplumber", "dbus-daemon", "dbus-broker", "gnome-shell", "plasmashell", "kwin_x11", "kwin_wayland", "mutter", "Xorg", "Xwayland", "gnome-session", "xfwm4", "xfce4-session", "xfsettingsd", "lightdm", "sddm", "gdm", "gnome-keyring-daemon", "polkitd", "bash", "notify-send", "python3"]
watched_paths = ["~/.ssh", "/var/spool/cron/crontabs", "~/.config/systemd/user", "/etc/systemd/system"]

[thresholds]
mem_eta_warn = 360
mem_eta_critical = 90
mem_floor_pct = 8
tmpfs_warn_pct = 85
tmpfs_critical_pct = 95

[cooldowns]
default = 300
fswatch = 120
ports = 600
