config global 'global'
	option enabled '1'
	option vault_path '/srv/config-vault'
	option auto_commit '1'
	option auto_push '1'

config gitea 'gitea'
	option enabled '1'
	option url 'http://127.0.0.1:3001'
	option repo 'gandalf/secubox-config-vault'
	option branch 'main'

# Module definitions - which UCI configs to track per module
config module 'users'
	option enabled '1'
	option description 'User Management & SSO'
	list config 'secubox-users'
	list config 'rpcd'

config module 'network'
	option enabled '1'
	option description 'Network Configuration'
	list config 'network'
	list config 'firewall'
	list config 'dhcp'

config module 'services'
	option enabled '1'
	option description 'Service Exposure & Distribution'
	list config 'secubox-exposure'
	list config 'haproxy'
	list config 'tor'

config module 'security'
	option enabled '1'
	option description 'Security & WAF'
	list config 'crowdsec'
	list config 'mitmproxy'

config module 'system'
	option enabled '1'
	option description 'System Settings'
	list config 'system'
	list config 'uhttpd'

config module 'containers'
	option enabled '1'
	option description 'LXC Containers'
	list config 'lxc'
	list config 'lxc-auto'

config module 'reporter'
	option enabled '1'
	option description 'Report Generator'
	list config 'secubox-reporter'

config module 'dns'
	option enabled '1'
	option description 'DNS & Domains'
	list config 'dns-provider'
	list config 'dnsmasq'

config module 'mesh'
	option enabled '1'
	option description 'P2P Mesh Network'
	list config 'vortex'
	list config 'yggdrasil'
	list config 'wireguard'