WarpShift-TUI/configs/warpshift.example.toml at main · RecursiveDev/WarpShift-TUI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# Example WarpShift-TUI configuration.
# Copy to configs/warpshift.local.toml for local experiments; do not commit credentials.
# Supported config syntax is intentionally small: simple [section] key = value entries with quoted strings, integers, booleans, and arrays of quoted strings.

[app]
startup_mode = "tui"

[warp]
# Local status by default; advanced workflows are controlled by explicit user consent in [safety].
status_source = "local"

[endpoint]
# Static known WARP endpoint sources used by local scans; no live discovery is performed by default.
static = ["162.159.192.10:2408", "162.159.193.20:2408"]

[rotation]
# Local rotation policy and bounded Phase 5 streaming/IP rotation planning.
# `rotation plan` and `rotation report` use local planning data; `rotation run` requires explicit user consent in [safety].
strategies = ["latency", "failure", "timed"]
timed_interval_seconds = 60
failure_threshold = 2
max_latency_ms = 0
max_attempts = 3
cooldown_seconds = 60
history_path = "configs/warpshift.rotation-history.json"
target_labels = ["general"]
region_labels = ["global"]

[identity]
# Path for a manually imported local identity JSON file. Do not commit this file.
store_path = "configs/warpshift.identity.json"
# Named profiles are stored under the parent directory by `warpshift profile ...` commands.

[wireguard]
# Export path for a generated WireGuard profile derived from a manually imported identity.
output_path = "configs/warpshift.wg.conf"
endpoint = "engage.cloudflareclient.com:2408"
dns = ["1.1.1.1", "1.0.0.1"]
allowed_ips = ["0.0.0.0/0", "::/0"]
persistent_keepalive = 25
mtu = 1280
# Phase 6 MTU helper is opt-in and requires an injected/local probe; no live probing is enabled by default.
auto_mtu = false
mtu_min = 1280
mtu_max = 1420
mtu_step = 10

[proxy]
enabled = false
listen_address = "127.0.0.1:0"
# Conservative client allowlist and per-client connection budget for SOCKS5/HTTP listeners.
allowed_client_cidrs = ["127.0.0.0/8", "::1/128"]
rate_limit_per_minute = 120
rate_limit_burst = 20
# TLS/HTTP2 mode records operator intent; only "disabled" has runtime effect in this version.
# Inbound TLS termination and outbound TLS wrapping are not implemented in this version.
tls_mode = "disabled"

[safety]
# Advanced workflows require both the feature flag and its matching consent flag.
# The user is responsible for enabling workflows only for accounts, networks, and traffic they control.
# `warpshift account register/status/delete` require account_automation + account_automation_consent.
# `warpshift license bind/status` require warp_plus_generation + warp_plus_generation_consent for user-owned WARP+ license binding only.
# `warpshift rotation run` requires streaming_unlock + streaming_unlock_consent.
# DPI evasion is not implemented in this version; the flags preserve config compatibility.
# These flags are deferred-scope compatibility settings; leave them disabled.
account_automation = false
account_automation_consent = false
warp_plus_generation = false # Backward-compatible name; enables user-owned WARP+ license binding, not third-party generation.
warp_plus_generation_consent = false
dpi_evasion = false
dpi_evasion_consent = false
streaming_unlock = false
streaming_unlock_consent = false