collin/anvil

f32fb115fa2e20b0df7207483eed5c39d7c67b3d / anvil.example.toml

1	# anvil configuration. Copy to `anvil.toml` and edit. All fields are optional;
2	# omitted fields fall back to the defaults shown here.
3
4	# Root directory for all server state (database + repositories).
5	data_dir = "data"
6
7	[http]
8	listen = "127.0.0.1:3000"
9	base_url = "http://localhost:3000"
10	# Memory budget (MiB) for the cache of syntax-highlighted file views.
11	# Highlighting large files is CPU-heavy, so repeat views are served from this
12	# cache. Set to 0 to disable it entirely on RAM-constrained hosts.
13	highlight_cache_mb = 16
14
15	[ssh]
16	enabled = false
17	# Internal bind address. Under Docker, set host = "0.0.0.0" and forward the port.
18	listen = "127.0.0.1:2222"
19	# What to show users in SSH clone URLs. Set clone_port to the externally
20	# forwarded port if it differs from the internal bind (e.g. Docker -p 2200:2222).
21	clone_host = "localhost"
22	clone_port = 2222
23	clone_user = "git"
24
25	[ci]
26	# Job sandbox. Containers always run with no Docker socket, no mounts, all
27	# capabilities dropped, and no-new-privileges; these knobs bound resources
28	# (0 = unlimited). See docs/untrusted-mode.md for the threat model.
29	# Images a pipeline may use: empty allows any; a tagless entry ("rust") allows
30	# every tag of that image; a tagged one ("alpine:3.20") exactly itself.
31	allowed_images = []
32	memory_mb = 2048
33	cpus = 2.0
34	pids_limit = 512
35	# Wall-clock limit per job, after which the container is killed.
36	timeout_secs = 1800
37	# Whether jobs get network access (most builds need it to fetch dependencies).
38	network = true
39	# User inside the job container, e.g. "1000:1000". Empty keeps the image default.
40	run_as = ""
41
42	# Continuous deployment: on a green run of deploy_branch in the ONE repo named
43	# by deploy_repo, POST to deploy_webhook with the X-Anvil-Deploy-Secret header.
44	# Empty deploy_repo/deploy_webhook disables deploys entirely.
45	deploy_repo = ""
46	deploy_branch = "main"
47	deploy_webhook = ""
48	deploy_secret = ""