
config core 'main'
	option enabled '1'
	option log_level 'info'
	option appstore_url 'https://repo.secubox.org/catalog'
	option appstore_fallback_local '1'
	option health_check_interval '300'
	option watchdog_interval '60'
	option led_heartbeat '1'
	option ai_enabled '0'
	option ai_mode 'copilot'
	option device_id ''

config security 'enforcement'
	option sandboxing '1'
	option module_signature_check '0'
	option allowed_repos 'official'
	option auto_update_check '1'

config diagnostics 'settings'
	option collect_metrics '1'
	option retain_days '7'
	option alert_enabled '1'
	option health_threshold_cpu '80'
	option health_threshold_memory '90'
	option health_threshold_storage '85'

config wan_access 'remote'
	option enabled '1'
	option https_enabled '1'
	option https_port '443'
	option http_enabled '0'
	option http_port '80'
	option ssh_enabled '0'
	option ssh_port '22'
	option allowed_ips ''
	option dmz_mode '0'

config domain 'external'
	option enabled '1'
	option base_domain ''
	option wildcard_enabled '1'
	option default_landing '1'

config domain 'local'
	option enabled '1'
	option base_domain 'sb.local'
	option suffix '_local'

# Service subdomain mappings - format: subdomain -> backend:port
config vhost 'console'
	option subdomain 'console'
	option backend '127.0.0.1'
	option port '8081'
	option description 'LuCI Console'
	option enabled '1'

config vhost 'control'
	option subdomain 'control'
	option backend '127.0.0.1'
	option port '8081'
	option description 'Control Panel'
	option enabled '1'

config vhost 'metrics'
	option subdomain 'metrics'
	option backend '127.0.0.1'
	option port '19999'
	option description 'Netdata Metrics'
	option enabled '0'

config vhost 'crowdsec'
	option subdomain 'crowdsec'
	option backend '127.0.0.1'
	option port '8080'
	option description 'CrowdSec Dashboard'
	option enabled '0'

config vhost 'factory'
	option subdomain 'factory'
	option backend '127.0.0.1'
	option port '7331'
	option description 'Master-Link Onboarding'
	option enabled '0'

config vhost 'glances'
	option subdomain 'glances'
	option backend '127.0.0.1'
	option port '61208'
	option description 'Glances Monitoring'
	option enabled '0'

config vhost 'play'
	option subdomain 'play'
	option backend '127.0.0.1'
	option port '8501'
	option description 'Streamlit Apps'
	option enabled '0'
