<?php

// -------- centralized remote configuration file -------

// link to remote config file, example: 
//      $nodewatch_remote_config = 'http://my-secure-server/nodewatch/config.txt'
// - plain text files only (make sure the file does not include UTF headers)
// - file must not have php opening or closing tags
// - file must not have any comments

$nodewatch_remote_config = ''; 

// 
// IMPORTANT: If $nodewatch_remote_config above is defined, values from remote configuration file
// will override any settings in this file. 
//


// -------- mandatory section ---------

// e-mail address for alerts
$admin_email = ''; 

// your license key, see http://vpsantiabuse.com/
$license_key = ''; 


// in test mode Nodewatch will not perform suspensions and will not send SMS alerts
// however, e-mail alerts will still be sent
// Change this to 0 once configured and tested
$testmode = 1; 

// -------- optional section ---------


// set to true to enables SMS alerts
$sms_alerts = false; 

// cell phone for sms alerts; for US/Canada: '555-5555-555'; 
// international example: '+55-555-5555-555' (+55 = country code with "+" prefix)
// multiple numbers example: '555-5555-555,+66-666-6666-666' (up to 3 phone numbers are supported)
$sms_phoneno = ''; 

// change to true to disable scanning customers' VPS for weak root passwords
$disable_nodewatch_passwords = false; 

// change to true to disable scanning customers' VPS for blacklisted process names
$disable_nodewatch_processes = false; 

// From: address for e-mail alerts. If not specified, $admin_email will be used.
$admin_email_from = ''; 

// Do not include inbound packets in pps accounting (this will effectively lead to inbound DoS attacks being ignored)
$limit_packets_ignore_ingress = false;

// Do not include outbound packets in pps accounting (this will effectively lead to outbound floods being ignored)
$limit_packets_ignore_egress = false;

// -------- Nodewatch-web section (optional) ---------
// see http://vpsantiabuse.com/nodewatch-web.php

// set to true to enable
$nodewatch_web_update_enabled = false; // change to false to disable web updates

// link to update.php
$nodewatch_web_update_url = 'http://yourdomain.com/update.php'; 
           
// password for nodewatch-web, must match the password set in config.php of your nodewatch-web installation
$nodewatch_web_password = ''; 


// -------- SolusVM integration section (optional) --------

// SolusVM integration. If these variables are not empty, Nodewatch
// will send an API call to your SolusVM upon VPS suspension
// This has no effect on the ability to suspend abusers,
// this is only needed so that your SolusVM installation
// is "aware" that the VPS is suspended.

$solusvm_calls_enabled  = false;  // Set to True to enable
$solusvm_master_ip      = '';     // IP address of the SolusVM master
$solusvm_master_port    = '';     // By default port 5656 will be used
$solusvm_master_api_id  = '';     // Must be created in the SolusVM Admin panel, menu: Configuration->Api Access
$solusvm_master_api_key = '';     // Must be created in the SolusVM Admin panel, menu: Configuration->Api Access
$solusvm_node_id        = '';     // Numeric Node ID of this physical server. It is located in the SolusVM Admin panel, menu: Nodes->List Nodes


// ---------------------------------------------------


// Do not change settings below unless you know what you are doing
// Only uncomment specific values you need to override.

// $logging = true; // extensive debug logging

// Warning thresholds
// $limits_packets [ 5 ]  =  160000;
// $limits_packets [ 15 ] =  150000;
// $limits_packets [ 60 ] =  130000;   // 1 min
// $limits_packets [ 180 ] = 120000;   // 3 min
// $limits_packets [ 900 ] = 110000;   // 15 min

// Suspension threshold
// $limit_packets_suspend = 500000; // Number of packets per second -  VPS will be suspended. 90000 is the number of 1400byte packets to fully load a gigabit pipe. If much more than this is transferred then it is most likely ddos.

// $limit_smtp = 200; // concurrent smtp connections before an alert is sent
// $limit_smtp_suspend = 1000; // concurrent smtp connections - VPS will be suspended

// $limit_ssh = 30; // concurrent SSH connections before an alert is sent
// $limit_ssh_suspend = 100; // concurrent SSH connections - VPS will be suspended

// $limit_conntrack = 30000; // Send alert when VPS spawns over 30000 conntrack sessions
// $limit_conntrack_suspend = 55000; // Suspend VPS if it spawns over 55000 conntrack sessions

// $limit_conntrack_unreplied = 10000; // Send alert when VPS spawns over 10000 unreplied conntrack sessions
// $limit_conntrack_unreplied_suspend = 20000; // Suspend VPS if it spawns over 20000 unreplied conntrack sessions

// $interval_between_repeat_alerts = 300; //seconds between repeat SMS/email alerts


// $ipdetectfailurefile = "/tmp/nodewatch_ipdetectfailure";
// $datadir_iolimit = "/tmp/nodewatch_iolimit";
// $datadir_passwords = "/tmp/nodewatch_passwords";
// $datadir_processes = "/tmp/nodewatch_processes";
// $datadir_emails = "/tmp/nodewatch_emails";
// $logfile = "/var/log/nodewatch.log";
// $eventlogfile = "/var/log/nodewatch_events.log";
// $statsfile = "/tmp/nodewatch_stats";
// $statsfile_passwords = "/tmp/nodewatch_passwords_stats";
// $statsfile_processes = "/tmp/nodewatch_processes_stats";

// $pidfile = "/var/run/nodewatch.pid";
// $pidfile_passwords = "/var/run/nodewatch_passwords.pid";
// $pidfile_processes = "/var/run/nodewatch_processes.pid";


?>