v1.0.8: Add configurable log level and immediate service stop

- Add log_level config option (debug, info, warn, error)
- Add JA4SENTINEL_LOG_LEVEL environment variable support
- Set TimeoutStopSec=2 for immediate stop on restart/stop
- Consolidate config files into single example (config.yml.example)
- Update RPM changelog

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

packaging/rpm/ja4sentinel.spec

@@ -3,7 +3,7 @@
 %if %{defined build_version}
 %define spec_version %{build_version}
 %else
-%define spec_version 1.0.7
+%define spec_version 1.0.8
 %endif
 
 Name:           ja4sentinel
@@ -117,6 +117,12 @@ fi
 %dir /var/run/logcorrelator
 
 %changelog
+* Sun Mar 01 2026 Jacquin Antoine <rpm@arkel.fr> - 1.0.8-1
+- Add configurable log level (debug, info, warn, error) via config.yml
+- Add JA4SENTINEL_LOG_LEVEL environment variable support
+- Set TimeoutStopSec=2 for immediate service stop on restart/stop
+- Consolidate config files into single example (config.yml.example)
+
 * Sat Feb 28 2026 Jacquin Antoine <rpm@arkel.fr> - 1.0.4-1
 - Add systemd sdnotify support (READY, WATCHDOG, STOPPING signals)
 - Enable systemd watchdog with 30s timeout

packaging/systemd/config.yml

@@ -1,39 +0,0 @@
-# Default configuration file for ja4sentinel
-# This file is installed as /etc/ja4sentinel/config.yml.default
-
-core:
-  # Network interface to capture traffic from
-  # Will be overridden by JA4SENTINEL_INTERFACE env var if set
-  interface: eth0
-
-  # TCP ports to monitor for TLS handshakes
-  listen_ports:
-    - 443
-    - 8443
-
-  # Optional BPF filter (leave empty for auto-generated filter based on listen_ports)
-  bpf_filter: ""
-
-  # Timeout in seconds for TLS handshake extraction (default: 30)
-  flow_timeout_sec: 30
-
-  # Buffer size for packet channel (default: 1000, increase for high-traffic environments)
-  packet_buffer_size: 1000
-
-outputs:
-  # Output to stdout (JSON lines) - disabled by default for production
-  - type: stdout
-    enabled: false
-    params: {}
-
-  # Output to file
-  - type: file
-    enabled: true
-    params:
-      path: /var/log/ja4sentinel/ja4.log
-
-  # Output to UNIX socket (for systemd/journald or other consumers)
-  - type: unix_socket
-    enabled: true
-    params:
-      socket_path: /var/run/ja4sentinel.sock

packaging/systemd/ja4sentinel.service

@@ -13,6 +13,7 @@ ExecStart=/usr/bin/ja4sentinel --config /etc/ja4sentinel/config.yml
 Restart=on-failure
 RestartSec=5
 WatchdogSec=30
+TimeoutStopSec=2
 NotifyAccess=main
 Environment=JA4SENTINEL_LOG_LEVEL=info