# Valkey Configuration
# Generated by Ansible - do not edit manually

# Network
bind {{ nebula_ip }}
port 6379
protected-mode yes

# General
daemonize no
pidfile /run/valkey/valkey.pid
loglevel notice
logfile ""

# Databases (0-15 available for multi-tenant use)
# See services.yml for DB allocation
databases 16

# Memory Management
maxmemory {{ valkey_maxmemory }}
maxmemory-policy {{ valkey_maxmemory_policy }}

# Persistence (disable for pure caching)
# Enable if you need persistence
save ""
appendonly no

# Security - ACL-based authentication
# Each service gets its own ACL user with scoped key prefix access
# Users are provisioned by data-service.yml and stored in Vault
aclfile /etc/valkey/users.acl

# Limits
maxclients 1000
timeout 0
tcp-keepalive 300

# Slow log
slowlog-log-slower-than 10000
slowlog-max-len 128