<?php

return [
    'db' => [
        'path' => '/app/data/logging.db',
    ],
    'clickhouse' => [
        'host' => 'clickhouse',
        'port' => 8123,
        'database' => 'jakach_logging',
        'username' => 'default',
        'password' => '',
    ],
    'worker' => [
        'file_check_interval' => 500000,
        'buffer_flush_interval_ms' => 100,
        'buffer_max_rows' => 1000,
    ],
    'sources' => [],
    'rules' => [
        [
            'name' => 'PHP Fatal Error',
            'pattern' => '/PHP Fatal/i',
            'severity' => 'critical_high',
            'rate_limit_seconds' => 30,
        ],
        [
            'name' => 'PHP Exception',
            'pattern' => '/Uncaught (Exception|Error)/',
            'severity' => 'critical',
            'rate_limit_seconds' => 30,
        ],
        [
            'name' => 'PHP Parse Error',
            'pattern' => '/PHP Parse/i',
            'severity' => 'critical',
        ],
        [
            'name' => 'PHP Warning',
            'pattern' => '/PHP (Warning|Notice)/i',
            'severity' => 'warning',
            'rate_limit_seconds' => 60,
        ],
        [
            'name' => 'HTTP 5xx',
            'pattern' => '/" (50[0-9]) /',
            'severity' => 'critical',
        ],
        [
            'name' => 'HTTP 4xx',
            'pattern' => '/" (4[0-9]{2}) /',
            'severity' => 'warning_low',
            'rate_limit_seconds' => 60,
        ],
        [
            'name' => 'Failed Login',
            'pattern' => '/Failed (login|password|authentication)/i',
            'severity' => 'critical_low',
        ],
        [
            'name' => 'Out of Memory',
            'pattern' => '/out of memory|OutOfMemory/i',
            'severity' => 'emergency',
            'rate_limit_seconds' => 60,
        ],
        [
            'name' => 'Connection Refused',
            'pattern' => '/Connection (refused|reset|timed? out)/i',
            'severity' => 'warning_high',
        ],
        [
            'name' => 'Disk Space',
            'pattern' => '/disk (full|space|usage|low)/i',
            'severity' => 'critical_low',
            'rate_limit_seconds' => 300,
        ],
        [
            'name' => 'Service Started',
            'pattern' => '/service started|daemon started|ready to serve/i',
            'severity' => 'notice',
        ],
        [
            'name' => 'Slow Query',
            'pattern' => '/slow (query|request|response)/i',
            'severity' => 'warning_high',
            'rate_limit_seconds' => 60,
        ],
    ],
];