# Redis Configuration for PatchMon Production
# Security settings
# requirepass ${REDIS_PASSWORD}  # Disabled - using command-line password instead
rename-command FLUSHDB ""
rename-command FLUSHALL ""
rename-command DEBUG ""
rename-command CONFIG "CONFIG_DISABLED"

# Memory management
maxmemory 256mb
maxmemory-policy allkeys-lru

# Persistence settings
save 900 1
save 300 10
save 60 10000

# Logging
loglevel notice
logfile ""

# Network security
bind 127.0.0.1
protected-mode yes

# Performance tuning
tcp-keepalive 300
timeout 0

# Disable dangerous commands
rename-command SHUTDOWN "SHUTDOWN_DISABLED"
rename-command KEYS ""
rename-command MONITOR ""
rename-command SLAVEOF ""
rename-command REPLICAOF ""