# Nexus Scanner — example configuration
# Copy to /etc/nexus-scanner/config.yaml and adjust.

site: "LUD"          # LUD = Lüdenscheid | BAR = Barleben
log_level: "info"    # debug | info | warn | error

db:
  path: "/var/lib/nexus-scanner/scanner.db"

web:
  addr: ":8080"
  token: "change-me-generate-with-openssl-rand-hex-32"

nexus:
  url: "https://it-nexus.cereda-systems.de"
  api_key: ""   # will be filled once IT Nexus wires up the scanner endpoint

modules:
  ad_sync:
    enabled: true
    interval: 30m
    server: "192.168.0.1"        # IP des Domain Controllers
    port: 389                    # 389 = LDAP, 636 = LDAPS
    bind_dn: "svc-scanner@winkel.local"
    bind_password: ""            # Passwort des Service-Accounts
    search_base: "DC=winkel,DC=local"
    tls: false

  arp_discovery:
    enabled: true
    interval: 5m          # how often to scan (Go duration: 30s, 5m, 1h …)
    interface: "eth0"     # network interface to send ARP requests on
    subnets:
      - "192.168.0.0/24"  # add more subnets as needed
      # - "10.0.0.0/24"