collin/anvil

2ba8b0fa7c1f52dc47b7ef83f5844faefd4b6fb4 / anvil.example.toml

1	# anvil configuration. Copy to `anvil.toml` and edit. All fields are optional;
2	# omitted fields fall back to the defaults shown here.
3
4	# Root directory for all server state (database + repositories).
5	data_dir = "data"
6
7	[http]
8	listen = "127.0.0.1:3000"
9	base_url = "http://localhost:3000"
10
11	[ssh]
12	enabled = false
13	# Internal bind address. Under Docker, set host = "0.0.0.0" and forward the port.
14	listen = "127.0.0.1:2222"
15	# What to show users in SSH clone URLs. Set clone_port to the externally
16	# forwarded port if it differs from the internal bind (e.g. Docker -p 2200:2222).
17	clone_host = "localhost"
18	clone_port = 2222
19	clone_user = "git"
20
21	[ci]
22	# Job sandbox. Containers always run with no Docker socket, no mounts, all
23	# capabilities dropped, and no-new-privileges; these knobs bound resources
24	# (0 = unlimited). See docs/untrusted-mode.md for the threat model.
25	# Images a pipeline may use: empty allows any; a tagless entry ("rust") allows
26	# every tag of that image; a tagged one ("alpine:3.20") exactly itself.
27	allowed_images = []
28	memory_mb = 2048
29	cpus = 2.0
30	pids_limit = 512
31	# Wall-clock limit per job, after which the container is killed.
32	timeout_secs = 1800
33	# Whether jobs get network access (most builds need it to fetch dependencies).
34	network = true
35	# User inside the job container, e.g. "1000:1000". Empty keeps the image default.
36	run_as = ""
37
38	# Continuous deployment: on a green run of deploy_branch in the ONE repo named
39	# by deploy_repo, POST to deploy_webhook with the X-Anvil-Deploy-Secret header.
40	# Empty deploy_repo/deploy_webhook disables deploys entirely.
41	deploy_repo = ""
42	deploy_branch = "main"
43	deploy_webhook = ""
44	deploy_secret = ""