| $ | [application] |
| $ | mode = local |
| $ | ca_certificate_file = |
| $ | cluster_id = cluster_1 |
| $ | working_dir = ~/.gateway.d |
| $ | venv_sweep_interval = 24h |
| $ | venv_retention_period = 30d |
| $ | |
| $ | [client] |
| $ | certificate_file = |
| $ | host = |
| $ | port = 50051 |
| $ | private_key_file = |
| $ | use_tls = true |
| $ | |
| $ | # Named client profiles — override individual client settings per cluster. |
| $ | # Profiles inherit unset values from the base [client] section. |
| $ | # Use with: iagctl --profile <profile_name> <command> |
| $ | # For more information, see Configure client profiles. |
| $ | [client:production] |
| $ | host = gw.prod.example.com |
| $ | certificate_file = ~/.gateway.d/certs/prod.crt |
| $ | private_key_file = ~/.gateway.d/certs/prod.key |
| $ | |
| $ | [client:staging] |
| $ | host = gw.staging.example.com |
| $ | |
| $ | [connect] |
| $ | certificate_file = /etc/gateway/gw-manager.pem |
| $ | private_key_file = /etc/gateway/gw-manager-key.pem |
| $ | enabled = true |
| $ | server_ha_enabled = false |
| $ | server_ha_is_primary = false |
| $ | hosts = |
| $ | |
| $ | [features] |
| $ | ansible_enabled = true |
| $ | hostkeys_enabled = true |
| $ | opentofu_enabled = true |
| $ | python_enabled = true |
| $ | |
| $ | [log] |
| $ | console_json = false |
| $ | file_enabled = true |
| $ | file_json = false |
| $ | level = INFO |
| $ | server_dir = /var/log/gateway |
| $ | timestamp_timezone = utc |
| $ | |
| $ | [registry] |
| $ | default_overridable = true |
| $ | |
| $ | [runner] |
| $ | announcement_address = |
| $ | certificate_file = |
| $ | listen_address = 127.0.0.1 |
| $ | port = 50051 |
| $ | private_key_file = |
| $ | runtime_data_dir = /var/lib/gateway |
| $ | use_tls = true |
| $ | |
| $ | [registry] |
| $ | default_overridable = true |
| $ | |
| $ | [secrets] |
| $ | encrypt_key_file = |
| $ | |
| $ | [server] |
| $ | api_key_expiration = 1440 |
| $ | certificate_file = |
| $ | distributed_execution = true |
| $ | listen_address = 127.0.0.1 |
| $ | port = 50051 |
| $ | private_key_file = |
| $ | runtime_data_dir = /var/lib/gateway |
| $ | use_tls = true |
| $ | |
| $ | [store] |
| $ | backend = local |
| $ | etcd_hosts = "localhost:2379" # space separated list |
| $ | etcd_use_tls = true |
| $ | etcd_ca_certificate_file = |
| $ | etcd_certificate_file = |
| $ | etcd_client_cert_auth = false |
| $ | etcd_private_key_file = |
| $ | |
| $ | [terminal] |
| $ | no_color = false |
| $ | timestamp_timezone = utc |
