.env.example

TELEGRAM_BOT_TOKEN=your_bot_token_here
TELEGRAM_OWNER_IDS=123456789,987654321
SCAN_SUBNET=192.168.1.0/24
MAX_CONCURRENT_SCANS=2
GATEWAY_IP=192.168.1.1
# Passive Sniffer Settings
# Set the explicit interface for the passive sniffer (e.g. eth0 or wlan0)
SNIFFER_INTERFACE=eth0
# Dashboard Settings
DASHBOARD_PASSWORD=your_secure_password_here

# Database Settings
DB_RETENTION_DAYS=90
DB_BACKUP_RETENTION_DAYS=30
# Leaving this empty will cause the sniffer daemon to exit to avoid WiFi impact.
TRUSTED_DHCP_SERVER=192.168.1.1
DB_PATH=data/netmon.db
LOG_LEVEL=INFO
LOG_FORMAT=text
LOG_FILE=logs/overwatcher.log
HOURLY_REPORT_ENABLED=true
MACVENDORS_API_ENABLED=true
MACVENDORS_API_TIMEOUT=5.0
BLE_SCAN_TIMEOUT=10.0
BLE_ADAPTER=hci0
BLE_PROXIMITY_IMMEDIATE_DBM=-50
BLE_PROXIMITY_NEAR_DBM=-70
BLE_ALERT_COOLDOWN_HOURS=2.0
CPU_WARN_PERCENT=85.0
RAM_WARN_PERCENT=85.0
DISK_WARN_PERCENT=90.0
RESOURCE_ALERT_COOLDOWN_HOURS=1.0
WATCHED_SERVICES='["overwatcher-dashboard","overwatcher-caddy","overwatcher-sniffer"]'
API_TOKEN=your_secure_token_here
# Port for the internal API server
API_PORT=8000

# Sweep interval in minutes
SWEEP_INTERVAL_MINUTES=5
# Speedtest interval in hours
SPEEDTEST_INTERVAL_HOURS=3

# Warning threshold for CPU temperature (Celsius)
DASHBOARD_TEMP_WARN_C=70.0
# Critical threshold for CPU temperature (Celsius)
DASHBOARD_TEMP_CRIT_C=80.0

# Start of quiet hours (hour 0-23, pauses some heavy scans)
QUIET_HOURS_START=1
# End of quiet hours (hour 0-23)
QUIET_HOURS_END=5

# High network load jitter threshold (ms) to defer scans
NETWORK_JITTER_THRESHOLD_MS=50.0

# Number of days to retain DNS logs
DNS_RETENTION_DAYS=14
# Enable threat intel (domains and IPs) checking
THREAT_INTEL_ENABLED=false

# Enable honeypot listeners
HONEYPOT_ENABLED=false
# Ports to listen on for the honeypot
HONEYPOT_PORTS=[2323, 8445, 8389]
SYN_SCAN_DETECTION_ENABLED=false