# author: simon-pierre boucher <contact@spboucher.ai>
# Reference ngrok configuration (§16.2). In production Tendril is launched via
# PM2 (deploy/ecosystem.config.cjs) with `ngrok http --url=www.ten-dril.com <port>`,
# matching the other cluster apps. This file documents the richer Traffic Policy
# setup for when Caddy/edge rate-limiting is introduced.
version: "3"
agent:
  authtoken: ${NGROK_AUTHTOKEN}
  log: /usr/local/var/log/ngrok.log
  log_level: info
  connect_timeout: 10s
endpoints:
  - name: tendril-api
    url: https://www.ten-dril.com
    upstream:
      url: 8092
    traffic_policy:
      inbound:
        - actions:
            - type: rate-limit
              config:
                name: global
                algorithm: sliding_window
                capacity: 600
                rate: 60s
        - expressions:
            - "req.url.path.startsWith('/internal')"
          actions:
            - type: deny
              config:
                status_code: 404