disable-conf: /etc/suricata/disable.conf
enable-conf: /etc/suricata/enable.conf
#drop-conf: /etc/suricata/drop.conf
modify-conf: /etc/suricata/modify.conf

ignore:
  - "*deleted.rules"
  - "dhcp-events.rules"  # DHCP is disabled in suricata.yaml
  - "files.rules"  # file-store is disabled in suricata.yaml

reload-command: suricatasc -c ruleset-reload-rules

