mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
- Added FMAs via GitOps - Added new label for scoping apps to ARM-based (Apple Silicon) Macs
104 lines
3.3 KiB
YAML
104 lines
3.3 KiB
YAML
agent_options:
|
|
path: ./lib/all/agent-options/agent-options.yml
|
|
org_settings:
|
|
features:
|
|
enable_host_users: true
|
|
enable_software_inventory: true
|
|
fleet_desktop:
|
|
transparency_url: https://fleetdm.com/transparency
|
|
host_expiry_settings:
|
|
host_expiry_enabled: false
|
|
integrations:
|
|
google_calendar:
|
|
- api_key_json: $DOGFOOD_CALENDAR_API_KEY
|
|
domain: fleetdm.com
|
|
jira: [ ]
|
|
zendesk: [ ]
|
|
mdm:
|
|
end_user_authentication:
|
|
entity_id: dogfood-eula.fleetdm.com
|
|
idp_name: Google Workspace
|
|
metadata: |-
|
|
$DOGFOOD_END_USER_SSO_METADATA
|
|
metadata_url: ""
|
|
apple_business_manager:
|
|
- organization_name: Fleet Device Management Inc.
|
|
macos_team: "💻 Workstations"
|
|
ios_team: "📱🏢 Company-owned mobile devices"
|
|
ipados_team: "📱🏢 Company-owned mobile devices"
|
|
volume_purchasing_program:
|
|
- location: Fleet Device Management Inc.
|
|
teams:
|
|
- "💻 Workstations"
|
|
- "💻🐣 Workstations (canary)"
|
|
- "📱🏢 Company-owned mobile devices"
|
|
- "📱🔐 Personal mobile devices"
|
|
org_info:
|
|
contact_url: https://fleetdm.slack.com/archives/C071NNMSP2R
|
|
org_logo_url: ""
|
|
org_logo_url_light_background: ""
|
|
org_name: Fleet
|
|
secrets:
|
|
- secret: $DOGFOOD_GLOBAL_ENROLL_SECRET
|
|
server_settings:
|
|
debug_host_ids:
|
|
- 1
|
|
- 3
|
|
deferred_save_host: false
|
|
enable_analytics: true
|
|
live_query_disabled: false
|
|
query_reports_disabled: false
|
|
scripts_disabled: false
|
|
server_url: https://dogfood.fleetdm.com
|
|
sso_settings:
|
|
enable_jit_provisioning: true
|
|
enable_sso: true
|
|
enable_sso_idp_login: true
|
|
entity_id: dogfood.fleetdm.com
|
|
idp_image_url: ""
|
|
idp_name: Google Workspace
|
|
metadata: |-
|
|
$DOGFOOD_SSO_METADATA
|
|
metadata_url: ""
|
|
webhook_settings:
|
|
failing_policies_webhook:
|
|
destination_url: $DOGFOOD_FAILING_POLICIES_WEBHOOK_URL
|
|
enable_failing_policies_webhook: true
|
|
host_batch_size: 0
|
|
policy_ids: [ ]
|
|
host_status_webhook:
|
|
days_count: 5
|
|
destination_url: $DOGFOOD_HOST_STATUS_WEBHOOK_URL
|
|
enable_host_status_webhook: true
|
|
host_percentage: 20
|
|
interval: 360m0s
|
|
vulnerabilities_webhook:
|
|
destination_url: $DOGFOOD_VULNERABILITIES_WEBHOOK_URL
|
|
enable_vulnerabilities_webhook: true
|
|
host_batch_size: 0
|
|
activities_webhook:
|
|
destination_url: $DOGFOOD_ACTIVITIES_WEBHOOK_URL
|
|
enable_activities_webhook: true
|
|
policies:
|
|
queries:
|
|
- path: ./lib/all/queries/collect-fleetd-information.yml
|
|
- path: ./lib/all/queries/collect-operating-system-information.yml
|
|
- path: ./lib/all/queries/collect-known-vulnerable-chrome-extensions.yml
|
|
- path: ./lib/macos/queries/detect-apns-certificate.yml
|
|
controls:
|
|
enable_disk_encryption: true
|
|
macos_migration:
|
|
enable: true
|
|
mode: voluntary
|
|
webhook_url: $DOGFOOD_MACOS_MIGRATION_WEBHOOK_URL
|
|
windows_enabled_and_configured: true
|
|
windows_migration_enabled: true
|
|
labels:
|
|
- path: ./lib/all/labels/arm-based-windows-hosts.yml
|
|
- path: ./lib/all/labels/debian-based-linux-hosts.yml
|
|
- path: ./lib/all/labels/macs-with-1password-installed.yml
|
|
- path: ./lib/all/labels/rpm-based-linux-hosts.yml
|
|
- path: ./lib/all/labels/virtual-machines.yml
|
|
- path: ./lib/all/labels/santa-test-devices.yml
|
|
- path: ./lib/all/labels/x86-based-windows-hosts.yml
|
|
- path: ./lib/all/labels/apple-silicon-macos-hosts.yml
|