sift.example.toml

# Development-only process configuration (not an instance manifest)
#
# For ordinary local, SSH, or hosted instances, use `sift instance new` and
# docs/INSTANCE-CONFIG.md. Their sift.toml starts with kind = "sift-instance"
# and has a [server] section; start them with --instance-root.
#
# Copy this to `sift.toml` only for a non-instance development server.
# Do not commit `sift.toml` with real machine paths, tokens, or private DB
# details. SIFT_ environment variables override this development file only;
# they do not override a locked instance manifest.

deployment = "personal"
transport = "loopback"
bind = "127.0.0.1:7474"

[log]
filter = "sift=info,tower_http=info"

[drivers]
mock = false
mock_extra = false

# SQLite files require an explicit server root and tenant IDs. No roots means
# file access is disabled. See docs/SQLITE.md; instance manifests use server.drivers.
# [drivers.sqlite.roots.analysis]
# path = "/operator-controlled/databases"
# allowed_tenants = [1]
# read_only = true

[timeouts]
request_secs = 30
shutdown_drain_secs = 30

[auth]
# Unsafe to commit with a real value.
# bearer_token = "replace-me"
loopback_bypass = true
# Required for team deployments and GitHub OAuth.
# public_base_url = "https://sift.example.com"
# Per-instance GitHub OAuth App credentials. Never commit the secret.
# github_client_id = "replace-me"
# github_client_secret = "replace-me"

[metadata]
enabled = true
# Optional. If unset, sift uses the platform-local state path.
# path = ".sift/metadata.sqlite3"
# Disposable credentials: use "file" with the keyfile below for persistence.
secret_backend = "memory"
# Required only when secret_backend = "file". The Nix dev shell and
# `sift-dev-secret-key` generate this local ignored file.
# secret_key_file = ".sift/dev-secret.key"
bootstrap_local = true
store_sql = true

[audit]
# May include query fingerprints and operational metadata; keep local unless
# intentionally sharing.
# operation_log_path = ".sift/operations.jsonl"

[limits]
max_http_result_rows = 10000
max_http_result_bytes = 16777216