Ensure legacy or malformed configuration keys are aligned with the current schema.
(self, config)
| 859 | "siem_enabled": False, |
| 860 | "siem_min_severity": "high", # forward floor: critical/high/medium/low/info |
| 861 | "siem_targets": [], # list of {type, ...} target dicts |
| 862 | # IP attribution (ip_intel.py): country/ASN/owner/abuse contact for a |
| 863 | # hostile IP. Registry-derived (RDAP + Team Cymru); never a street |
| 864 | # address. Set ip_intel_allow_network false to stay fully offline |
| 865 | # (cache + local scope classification only — no lookup leaks the fact |
| 866 | # that you looked, which can matter for a security sensor). |
| 867 | "ip_intel_allow_network": True, |
| 868 | "ip_intel_enrich_incidents": True, # attribute public IPs in incidents |
| 869 | # Browser terminal (interactive shell over the web UI). OFF by |
| 870 | # default — it exposes a shell on the Pi (as the 'ragnar' user), |
no outgoing calls
no test coverage detected