vantage-docs/docs/reference/agent-config.md

id, title, sidebar_label

id	title	sidebar_label
agent-config	Agent configuration	Agent config

The agent reads no environment variables. Everything is in one YAML file.

Location

Platform	Path
Linux	/etc/vantage/config.yaml
Windows	%ProgramData%\vantage\config.yaml

Directory 0700, file 0600. The install script sets both.

Contents

server_url: "vantage.yourdomain.com:9090"
server_id: "<uuid>"
pre_reg_token: "<token>" # removed after the first successful Register()
agent_token: "" # written by the agent after Register()
poll_interval: 30s
tls: true

Field	Meaning
server_url	host:port of the gRPC endpoint. Comes from the server's GRPC_HOST
server_id	The identity issued when the enrolment was created
pre_reg_token	Single-use, one hour. Cleared once registration succeeds
agent_token	The permanent credential, written by the agent itself
poll_interval	How often the agent polls for key state. Default 30s
tls	Whether to use TLS. Leave true

:::danger This file is the credential agent_token is plaintext here and nowhere else the control plane holds only its SHA-256. Anyone who can read this file can act as this agent. :::

Service management

Linux

Unit at /etc/systemd/system/vantage-agent.service, Restart=always, running as root.

systemctl status vantage-agent
systemctl restart vantage-agent
journalctl -u vantage-agent -f

Windows

A service registered through NSSM, or installed by the MSI.

Get-Service vantage-agent
Restart-Service vantage-agent

Moving an agent to a new control plane

Change server_url, clear agent_token, set a fresh pre_reg_token from a new enrolment, and restart. The old control plane still holds a server record that will go offline; delete it there.

Uninstalling

systemctl disable --now vantage-agent
rm -f /usr/local/bin/vantage-agent /etc/systemd/system/vantage-agent.service
rm -rf /etc/vantage
systemctl daemon-reload

Keys already written to authorized_keys remain on disk the agent is no longer running to remove them. Revoke first if that matters.