---
# List of domains whose network block failures (e.g., ORB) should be ignored
# during CSP checks. This is useful for suppressing known external resources
# (e.g., third-party CDNs) that cannot be influenced but otherwise cause
# unnecessary alerts in the crawler reports.
HEALTH_CSP_IGNORE_NETWORK_BLOCKS_FROM: []
# Docker image to run
HEALTH_CSP_IMAGE: "{{ lookup('config', 'sys-ctl-hlth-csp', 'services.csp-checker.image') }}:{{ lookup('config', 'sys-ctl-hlth-csp', 'services.csp-checker.version')
}}"
# If true, pull the image on each run (safe but slower)
HEALTH_CSP_ALWAYS_PULL: false
# Base navigation budget in milliseconds that the onion budget multiplies by the Tor flavor's factor
HEALTH_CSP_TIMEOUT_MS: 20000
# Navigation budget in milliseconds a clearnet vhost gets: 1.7x the slowest navigation measured on a supported target
HEALTH_CSP_CLEARNET_TIMEOUT_MS: 45000
# Seconds added per vhost on top of its navigation budget when sizing TimeoutStartSec
HEALTH_CSP_DOMAIN_RESERVE_SECONDS: 5
# Number of vhosts the checker probes in parallel, each in its own browser context
HEALTH_CSP_CONCURRENCY: 4
