9daf1fd378
- Add comprehensive database migrations (001-024) for schema evolution - Enhance API schema with expanded type definitions and resolvers - Add new middleware: audit logging, rate limiting, MFA enforcement, security, tenant auth - Implement new services: AI optimization, billing, blockchain, compliance, marketplace - Add adapter layer for cloud integrations (Cloudflare, Kubernetes, Proxmox, storage) - Update Crossplane provider with enhanced VM management capabilities - Add comprehensive test suite for API endpoints and services - Update frontend components with improved GraphQL subscriptions and real-time updates - Enhance security configurations and headers (CSP, CORS, etc.) - Update documentation and configuration files - Add new CI/CD workflows and validation scripts - Implement design system improvements and UI enhancements
130 lines
2.4 KiB
JSON
130 lines
2.4 KiB
JSON
{
|
|
"organization": {
|
|
"name": "Your Organization",
|
|
"auth_domain": "sankofa.nexus"
|
|
},
|
|
"enrollment": {
|
|
"enabled": true,
|
|
"mode": "automatic",
|
|
"require_mfa": true,
|
|
"device_posture_checks": [
|
|
"managed_device",
|
|
"os_version",
|
|
"disk_encryption"
|
|
]
|
|
},
|
|
"policies": [
|
|
{
|
|
"name": "Default WARP Policy",
|
|
"description": "Default policy for all WARP devices",
|
|
"rules": [
|
|
{
|
|
"action": "allow",
|
|
"match": "any",
|
|
"identity": {
|
|
"groups": [
|
|
{
|
|
"name": "employees"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "Admin WARP Policy",
|
|
"description": "Enhanced access for administrators",
|
|
"rules": [
|
|
{
|
|
"action": "allow",
|
|
"match": "any",
|
|
"identity": {
|
|
"groups": [
|
|
{
|
|
"name": "admins"
|
|
},
|
|
{
|
|
"name": "platform-engineers"
|
|
}
|
|
]
|
|
},
|
|
"require": [
|
|
{
|
|
"mfa": {}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"device_posture": {
|
|
"checks": [
|
|
{
|
|
"name": "managed_device",
|
|
"type": "os_version",
|
|
"enabled": true,
|
|
"rules": [
|
|
{
|
|
"os": "windows",
|
|
"min_version": "10.0.19041"
|
|
},
|
|
{
|
|
"os": "macos",
|
|
"min_version": "11.0"
|
|
},
|
|
{
|
|
"os": "linux",
|
|
"min_version": "5.4"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "disk_encryption",
|
|
"type": "disk_encryption",
|
|
"enabled": true,
|
|
"require": true
|
|
},
|
|
{
|
|
"name": "firewall_enabled",
|
|
"type": "firewall",
|
|
"enabled": true,
|
|
"require": true
|
|
}
|
|
]
|
|
},
|
|
"settings": {
|
|
"gateway_proxy": {
|
|
"enabled": true,
|
|
"tcp_port": 4000,
|
|
"udp_port": 4001
|
|
},
|
|
"split_tunnels": {
|
|
"enabled": true,
|
|
"exclude": [
|
|
"*.sankofa.nexus",
|
|
"10.0.0.0/8",
|
|
"172.16.0.0/12",
|
|
"192.168.0.0/16"
|
|
]
|
|
},
|
|
"dns": {
|
|
"servers": [
|
|
"1.1.1.1",
|
|
"1.0.0.1"
|
|
],
|
|
"split_dns": [
|
|
{
|
|
"domains": [
|
|
"sankofa.nexus",
|
|
"*.sankofa.nexus"
|
|
],
|
|
"servers": [
|
|
"10.0.0.53"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
|