; ZyloVPN node agent configuration
;
; Install to /etc/zylovpn/agent.conf with mode 0600 — it contains the agent
; token, which is the node's only credential.
;
;   sudo install -d -m 0700 /etc/zylovpn
;   sudo install -m 0600 agent.conf.example /etc/zylovpn/agent.conf
;   sudo nano /etc/zylovpn/agent.conf

[agent]

; Base URL of the ZyloVPN control plane, without a trailing path.
; Must be https:// — the agent refuses plaintext unless allow_insecure is set,
; because the token is sent on every poll.
panel_url = https://panel.zylovpn.com

; One-time token shown when the server was registered, or after a rotation.
; If you no longer have it, rotate the token in the admin panel to get a new
; one; it is stored only as a hash and cannot be recovered.
token = zylo_node_REPLACE_ME

; WireGuard interface this node serves. Change only if wg0 is already in use.
interface = wg0

; Seconds between heartbeats. The heartbeat is small — it carries metrics and
; a hash — so a short interval is cheap. Peer changes land within one interval.
poll_interval = 5

; Seconds between usage reports. Heavier than a heartbeat: one row per peer.
usage_interval = 60

; HTTP timeout in seconds.
timeout = 15

; --- Development only ------------------------------------------------------
; Set both only against a local test panel. Either one sends the agent token
; somewhere it can be read or intercepted.

; allow_insecure = true
; verify_tls = false