config settings 'settings'
	option enabled '1'
	option socket_type 'unix'
	option socket_address '127.0.0.1'
	option socket_port '7150'
	option unix_socket_path '/var/run/netifyd/netifyd.sock'
	option auto_start '1'
	option flow_retention '3600'
	option max_flows '10000'

config monitoring 'monitoring'
	option enable_flow_tracking '1'
	option enable_app_detection '1'
	option enable_protocol_detection '1'
	option enable_device_tracking '1'
	option enable_ssl_inspection '1'
	option enable_dns_inspection '1'

config analytics 'analytics'
	option enabled '1'
	option retention_days '7'
	option top_apps_limit '10'
	option top_protocols_limit '10'
	option top_devices_limit '20'

config alerts 'alerts'
	option enabled '0'
	option alert_on_new_device '0'
	option alert_on_suspicious_traffic '0'
	option alert_threshold_mbps '100'

config sink 'sink'
	option enabled '0'
	option type 'unix'
	option unix_path '/tmp/netifyd-flows.json'
	option tcp_address '127.0.0.1'
	option tcp_port '9501'

config plugin 'bittorrent'
	option enabled '0'
	option ipset 'secubox-bittorrent'
	option ipset_family 'inet'
	option match_application 'bittorrent'

config plugin 'nftables'
	option enabled '0'
	option table 'filter'
	option chain 'SECUBOX'
	option action 'drop'
	option target_ipset 'secubox-banned'
