# Configuration ja4ebpf — stack nginx + varnish
# TLS terminé par nginx → uprobe sur libssl.so.3 (liée par nginx).
interface: eth0
ssl_lib_path: "/usr/lib64/libssl.so.3"

clickhouse:
  dsn: "clickhouse://default:@clickhouse:9000/ja4_logs"
  batch_size: 100
  flush_secs: 1

correlation:
  timeout_ms: 500
  slowloris_ms: 10000

log:
  level: "info"
  format: "json"
