auth_enabled: false                        # single-tenant; sources split by label

server:
  http_listen_port: 3100
  grpc_listen_port: 9096
  log_level: info

common:
  path_prefix: /loki
  replication_factor: 1
  ring:
    kvstore: { store: inmemory }
  storage:
    s3:
      endpoint: 192.168.0.30:3900          # no scheme; insecure toggles http
      region: garage                       # MUST byte-match s3_region in garage.toml
      bucketnames: loki-chunks
      access_key_id: ${GARAGE_ACCESS_KEY}
      secret_access_key: ${GARAGE_SECRET_KEY}
      s3forcepathstyle: true               # mandatory for Garage
      insecure: true                       # http on LAN; drop if you TLS-front Garage

schema_config:
  configs:
    - from: 2026-07-01                     # <= first-ingest date; never mutate historical
      store: tsdb
      object_store: s3
      schema: v13
      index: { prefix: index_, period: 24h }

storage_config:
  tsdb_shipper:
    active_index_directory: /loki/tsdb-index
    cache_location: /loki/tsdb-cache

limits_config:
  allow_structured_metadata: true
  volume_enabled: true
  retention_period: 744h                   # 31d; compactor enforces
  reject_old_samples: true
  reject_old_samples_max_age: 168h
  max_line_size: 256KB
  ingestion_rate_mb: 8                      # per-tenant; bump if you hit 429s
  ingestion_burst_size_mb: 16

compactor:
  working_directory: /loki/compactor