# Terminal Mirror Mac Agent Configuration

# Web Server Connection
WEB_SERVER_URL=wss://shellmirror.app/php-backend/websocket
WEB_SERVER_HTTP=https://shellmirror.app
AGENT_SECRET=your-secure-agent-secret-here

# Authentication
GOOGLE_CLIENT_ID=804759223392-i5nv5csn1o6siqr760c99l2a9k4sammp.apps.googleusercontent.com

# Agent Settings
AGENT_ID=mac-primary
RECONNECT_INTERVAL=5000
HEARTBEAT_INTERVAL=30000
COMMAND_TIMEOUT=30000

# Cloud WebRTC signaling (OFF by default for safety).
# The public relay does not authenticate callers, so exposing the agent on it lets
# anyone who knows the agent id open a shell. Only set this to 'true' when you point
# WEBSOCKET_URL at a relay you control, and ALWAYS pair it with CONNECT_SECRET.
ENABLE_CLOUD_WEBRTC=false
# Shared secret the browser must present in client-hello before a shell is spawned.
# Leave empty only when cloud signaling is disabled and you use LAN-direct.
CONNECT_SECRET=

# Security
MAX_CONCURRENT_SESSIONS=5
ALLOWED_COMMANDS=ls,pwd,whoami,echo,cat,grep,find,ps,top,df,du,uname,date,which
BLOCKED_COMMANDS=rm,rmdir,sudo,su,chmod,chown,kill,killall,shutdown,reboot

# Logging
LOG_LEVEL=info
LOG_FILE=./logs/agent.log