mission:
  id: "CLIENT-YYYY-XXX"
  scope:
    networks: ["auto"]  # "auto" = detect from wlan0 interface at startup
    excluded_hosts: ["auto"]  # "auto" = gateway + self IP, auto-detected
    excluded_ports: [502, 503]
  authorization: "ROE-YYYY-XXX.pdf"
  max_runtime_hours: 0  # 0 = no limit, runs until killed
  auto_wipe_on_complete: false

model:
  local:
    path: "/data/data/com.termux/files/home/models/LFM2.5-1.2B-Instruct-Heretic.Q8_0.gguf"
    ctx_size: 8192
    threads: 4
    port: 8080
  fallback:
    ctx_size: 2048
    threads: 2
  thor:
    endpoint: "http://100.x.x.x:8080/v1"
    model: "qwen3.5-27b"
    enabled: true

kali_mcp:
  package: "mcp-kali-server"
  port: 5000
  timeout: 300

scope_proxy:
  port: 8800
  upstream: "http://127.0.0.1:5000"

webui:
  port: 8888
  # Binds to Tailscale IP by default (not exposed on target network)

stealth:
  scan_rate_per_min: 50
  cred_spray_rate_per_min: 10
  jitter_range_ms: [200, 2000]
  avoid_ids_signatures: true
  wifi_deauth:
    prefer_targeted: true
    max_deauth_count: 5
    cooldown_sec: 30

wifi:
  interface_external: "wlan1"
  interface_internal: "wlan0"
  wordlists:
    - "/usr/share/wordlists/rockyou.txt"
    - "/opt/nightcrawler/wordlists/custom.txt"
  max_crack_time_min: 30
  multi_ssid:
    enabled: true
    max_additional_cracks: 2

logging:
  dir: "/root/nightcrawler/logs"
  encrypt_creds: true
  encryption_key_env: "NC_CRED_KEY"

dry_run:
  enabled: false
  scenario: "simulation/scenarios/basic_wpa2.json"