CryptoTrace/cryptotrace.toml.example at main · ParvLab/CryptoTrace · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
# CryptoTrace Configuration
# Place this file as cryptotrace.toml in the working directory or
# in one of the standard config paths:
#   Linux/macOS: ~/.config/cryptotrace/cryptotrace.toml
#   Windows:     %APPDATA%/cryptotrace/cryptotrace.toml

# === AI Provider (optional, opt-in) ===
# All AI features are disabled by default.
# Enable by uncommenting and configuring a provider below.

#[ai]
#provider = "openai"   # or "anthropic", "local" (Ollama)
#api_key = "sk-..."    # not required for "local"
#model = "gpt-4o"      # "claude-sonnet-4", "llama3" for local
#base_url = "http://localhost:11434"  # only for "local" (Ollama)
#max_tokens = 1024
#temperature = 0.3
#timeout_seconds = 30

# === Analysis Defaults ===

[analysis]
# Default detection context: "forensics", "malware", or "password"
context = "forensics"

# Maximum file size in bytes (default: 50 MB)
max_file_size = 52428800

# Maximum string input size in bytes (default: 10 MB)
max_string_size = 10485760

# Enable recursive layer analysis by default
deep = false

# === Signature Database ===

[signatures]
# Path to magic byte registry YAML file
# Default: bundled into binary (if empty)
registry_path = ""

# Enable auto-update checks (requires network)
auto_update = false

# GPG key ID for signature verification (Phase 2)
#gpg_key_id = ""

# === Sandbox ===

[sandbox]
# Enable subprocess isolation for risky parsers (Phase 5)
enabled = false

# Worker binary path (default: bundled cryptotrace-worker)
#worker_path = ""

# Maximum concurrent workers
max_workers = 4

# Worker timeout in seconds
timeout_seconds = 30

# === Cache ===

[cache]
# Maximum AI narrative cache entries
max_ai_entries = 100

# Enable input deduplication cache
dedup_enabled = true
max_dedup_entries = 1000

# === API Server ===

[api]
# Enable REST API server (start with: cryptotrace --api)
enabled = false

# Listen address
bind = "127.0.0.1:8080"

# API key for authentication (empty string = no auth required)
# Provide via header: Authorization: Bearer <key> or X-API-Key: <key>
#api_key = ""

# Rate limit: requests per minute per IP
rate_limit = 60

# Enable subprocess sandboxing for API requests
sandbox_enabled = false

# === Logging ===

[logging]
# Log level: trace, debug, info, warn, error
level = "info"

# Log format: "pretty" or "json"
format = "pretty"

# Audit log path (empty = disabled)
#audit_path = ""