## Logrus tunnel client UCI config.
##
## Edit then run:    uci commit logrus && service logrus restart
## Inspect with:     uci show logrus
##
## On first boot, /etc/uci-defaults/99-logrus reads `account` + `passphrase`
## and runs `logrus-client login` to seed the session under /etc/logrus/.
## Once logged in those two fields can be safely cleared.

config logrus 'main'
	## Enable / disable the service. The procd init refuses to start
	## when this is 0 — flip it after you've configured credentials.
	option enabled '0'

	## user-server base URL. The default points at the public stand;
	## override for self-hosted control planes.
	option user_server 'https://logrus.space/api'

	## Anonymous credentials issued by `logrus-client signup` (run once
	## from any client). Format: account is XXXX-XXXX-XXXX, passphrase
	## is a 6-word phrase. Leave blank if /etc/logrus/ already holds a
	## valid session.
	option account ''
	option passphrase ''

	## Pin a specific server (node id or hostname). Empty = let the
	## strategy manager auto-rotate based on /v1/me/config.
	option server ''

	## Optional geo narrowing — alternative to a hard server pin.
	option country ''
	option city ''

	## TUN mode is mandatory for a router-as-gateway deployment: SOCKS5
	## won't capture LAN traffic transparently. Disabling makes the
	## service useless on a router; the toggle exists only for x86_64
	## debug installs where you want to talk to the SOCKS endpoint
	## directly.
	option tun '1'

	## Log level: debug | info | warn | error.
	option log_level 'info'
