# Generated from Goauld config/agent_config.yaml. Do not edit manually.
# Age public key associated with the server. Must match the server's public key.
age-public-key: ""

# Control HTTP server to connect to.
server: http://www.example.com

# SSH server used for direct SSH connections.
ssh-server: www.example.com:2222

# QUIC domain used to tunnel traffic.
quic-domain: app.example.com:443

# TLS server used for SSH-over-TLS connections.
tls-server: app.example.com

# DNS servers used for SSH-over-DNS connections. Use 'system' to include the system DNS servers.
dns-server:
- system
- tns.example.com
- 8.8.8.8
- 1.1.1.1
- 9.9.9.9

# DNS domain used to tunnel SSH-over-DNS traffic.
dns-domain: t.example.com

# Secondary DNS domain used to tunnel SSH-over-DNS traffic (SSH over DNS-ALT).
dns-domain-alt: s.example.com

# Password for local SSH access. If empty, a random password is generated automatically.
shared-password: ""

# Password required to access the agent.
password: ""

# Disable the local password entirely. Takes precedence over any static password set at compile time, at run time, or in the configuration file.
disable-password: false

# Friendly name to identify the agent (default: 'user@hostname').
name: user@hostname

# Enable the SSHD service.
sshd-enabled: true

# Enable persistent shell sessions.
sessions-enabled: true

# Allow read-only operators to observe persistent shell sessions.
session-observers: true

# Maximum persistent session output history in bytes (0 disables history).
session-history-size: 4194304

# Enable the SOCKS proxy service.
socks-enabled: true

# Enable the HTTP proxy service.
http-proxy-enabled: true

# Enable the MITM HTTP proxy service.
mitm-http-proxy-enabled: false

# Enable the WireGuard service.
wg-enabled: false

# Enable the Relay service.
relay-enabled: false

# Username for the MITM HTTP upstream proxy.
mitm-http-proxy-username: ""

# Password for the MITM HTTP upstream proxy.
mitm-http-proxy-password: ""

# Domain for the MITM HTTP upstream proxy.
mitm-http-proxy-domain: ""

# Proxy URL to use for control server connections. If omitted, the system proxy is used (if configured).
proxy: ""

# Username for the proxy server.
proxy-username: ""

# Password for the proxy server.
proxy-password: ""

# Authentication domain for the proxy server.
proxy-domain: ""

# Ignore system proxy settings.
no-proxy: false

# Custom proxy used within the SOCKS proxy. Falls back to the system proxy if not set.
socks-custom-proxy: ""

# Configure the upstream HTTP proxy to use (none|system|http|mitm|custom).
socks-upstream-proxy: http

# Username for the SOCKS upstream proxy.
socks-proxy-username: ""

# Password for the SOCKS upstream proxy.
socks-proxy-password: ""

# Domain for the SOCKS upstream proxy.
socks-proxy-domain: ""

# Custom proxy used within the HTTP proxy. Falls back to the system proxy if not set.
http-custom-proxy: ""

# Username for the HTTP upstream proxy.
http-proxy-username: ""

# Password for the HTTP upstream proxy.
http-proxy-password: ""

# Domain for the HTTP upstream proxy.
http-proxy-domain: ""

# Remote SSH port to bind on the server (0 = random).
rssh-port: 0

# Remote SOCKS proxy port to bind on the server (0 = random).
socks-port: 0

# Remote HTTP proxy port to bind on the server (0 = random).
http-port: 0

# Remote MITM HTTP proxy port to bind on the server (0 = random).
mitm-http-port: 0

# Remote WireGuard port to bind on the server (0 = random).
wg-port: 0

# Local port the relaying agent listens on for other agents (0 = random).
relay-port: 0

# Prevent the system from sleeping or locking.
keep-awake: false

# Interval in seconds between keepalive messages (0 = disabled).
keepalive: 20

# Increase log verbosity. Repeat for more detail.
verbose: 0

# Suppress all log output.
quiet: false

# Restrict agent activity to working days only.
only-working-days: false

# Weekdays when the agent may be active (monday-sunday or mon-sun).
working-days:
- monday
- tuesday
- wednesday
- thursday
- friday

# Start time of the working day (e.g. '09:00').
working-day-start: ""

# End time of the working day (e.g. '17:00').
working-day-end: ""

# Timezone used for working day calculations (e.g. 'Europe/Paris').
working-day-timezone: ""

# Preferred order of SSH tunnel protocols.
rssh-order:
- SSH
- TLS
- WS
- HTTP
- DNS

# Timeout in seconds for each connection to the server: SSH tunnel and control socket attempts, the configuration exchange, and keepalive replies (0 = unlimited). Raise it for slow transports such as DNS.
timeout: 60

# Ports to forward to the server (REMOTE_PORT[:LOCAL_IP]:LOCAL_PORT). Use 0 for a random remote port.
remote-port-forwarding: []

# Maximum number of connection retries before giving up.
max-retries: 0

# Show version information and exit.
version: false

# Generate a configuration file from the current settings.
generate-config: false

# Path to the configuration file to use.
config-file: ""

# Run the agent in the background.
background: false

# Run the agent in hidden background mode.
hidden-background: false

# System command used to perform SSH over DNS when raw DNS queries are blocked. The provided command is responsible for performing the DNS query and returning the result as raw bytes.
#  PowerShell example: "((Resolve-DnsName -Type TXT -Server 127.0.0.1 '%s')[0].Strings -join '' -replace '\s+', '' -split '..' | ForEach-Object { [Convert]::ToByte($_,16) } )"
#  Linux example:"dig +short +unknownformat -t TXT '%s' @127.0.0.1 | head -n1 | cut -d ' ' -f3- | tr -d ' '  | xxd -r -p".
custom-dns-command: ""

# Number of days before the agent self-terminates (0 = disabled).
kill-switch: 7

# Calendar date after which the agent self-terminates (YYYY-MM-DD, empty = disabled).
kill-switch-date: ""

# Local port to expose the browser WS proxy (0 = random).
browser-proxy-port: 0

# Extra arguments that will be trashed, required when launching the agent in some contexts.
remaining: []