agent_options:
  path: ./lib/all/agent-options/agent-options.yml
org_settings:
  features:
    enable_host_users: true
    enable_software_inventory: true
  fleet_desktop:
    transparency_url: https://fleetdm.com/transparency
  host_expiry_settings:
    host_expiry_enabled: false
  integrations:
    google_calendar:
    - api_key_json: $DOGFOOD_CALENDAR_API_KEY
      domain: fleetdm.com
    jira: [ ]
    zendesk: [ ]
  mdm:
    end_user_authentication:
      entity_id: dogfood-eula.fleetdm.com
      idp_name: Google Workspace
      metadata: |-
        $DOGFOOD_END_USER_SSO_METADATA
      metadata_url: ""
    end_user_license_agreement: ../it-and-security/lib/macos/misc/eula.pdf
    apple_business_manager:
    - organization_name: Fleet Device Management Inc.
      macos_team: "💻 Workstations" 
      ios_team: "📱🏢 Company-owned mobile devices"
      ipados_team: "📱🏢 Company-owned mobile devices"
    volume_purchasing_program:
    - location: Fleet Device Management Inc.
      teams:
      - "💻 Workstations"
      - "💻🐣 Workstations (canary)"
      - "📱🏢 Company-owned mobile devices"
      - "📱🔐 Personal mobile devices"
      - "🧪 Testing & QA"
  org_info:
    contact_url: https://fleetdm.slack.com/archives/C071NNMSP2R
    org_logo_url: ""
    org_logo_url_light_background: ""
    org_name: Fleet
  secrets:
    - secret: $DOGFOOD_GLOBAL_ENROLL_SECRET
  server_settings:
    debug_host_ids:
      - 1
      - 3
    deferred_save_host: false
    enable_analytics: true
    live_query_disabled: false
    query_reports_disabled: false
    scripts_disabled: false
    server_url: https://dogfood.fleetdm.com
  sso_settings:
    enable_jit_provisioning: true
    enable_sso: true
    enable_sso_idp_login: true
    entity_id: dogfood.fleetdm.com
    idp_image_url: ""
    idp_name: Google Workspace
    metadata: |-
      $DOGFOOD_SSO_METADATA
    metadata_url: ""
  webhook_settings:
    failing_policies_webhook:
      destination_url: $DOGFOOD_FAILING_POLICIES_WEBHOOK_URL
      enable_failing_policies_webhook: true
      host_batch_size: 0
      policy_ids: [ ]
    host_status_webhook:
      days_count: 5
      destination_url: $DOGFOOD_HOST_STATUS_WEBHOOK_URL
      enable_host_status_webhook: true
      host_percentage: 20
    interval: 360m0s
    vulnerabilities_webhook:
      destination_url: $DOGFOOD_VULNERABILITIES_WEBHOOK_URL
      enable_vulnerabilities_webhook: true
      host_batch_size: 0
    activities_webhook:
      destination_url: $DOGFOOD_ACTIVITIES_WEBHOOK_URL
      enable_activities_webhook: true
policies:
queries:
  - path: ./lib/all/queries/collect-fleetd-information.yml
  - path: ./lib/all/queries/collect-operating-system-information.yml
  - path: ./lib/all/queries/collect-known-vulnerable-chrome-extensions.yml
  - path: ./lib/macos/queries/detect-apns-certificate.yml
  - path: ./lib/macos/queries/collect-macos-compatibility-data.yml
controls: 
  enable_disk_encryption: true
  macos_migration:
    enable: true
    mode: voluntary
    webhook_url: $DOGFOOD_MACOS_MIGRATION_WEBHOOK_URL
  windows_enabled_and_configured: true
  windows_migration_enabled: true
labels:
  - path: ./lib/all/labels/arm-based-windows-hosts.yml
  - path: ./lib/all/labels/debian-based-linux-hosts.yml
  - path: ./lib/all/labels/macs-with-1password-installed.yml
  - path: ./lib/all/labels/rpm-based-linux-hosts.yml
  - path: ./lib/all/labels/virtual-machines.yml
  - path: ./lib/all/labels/santa-test-devices.yml
  - path: ./lib/all/labels/x86-based-windows-hosts.yml
  - path: ./lib/all/labels/apple-silicon-macos-hosts.yml
  - path: ./lib/all/labels/keynote-installed.yml
  - path: ./lib/all/labels/macos-compatibility-extension-installed.yml
  - path: ./lib/all/labels/team-g-mdm.yml
  - path: ./lib/all/labels/conditional-access-test-group.yml
  - path: ./lib/all/labels/nudge-test-devices.yml