den/den.example.yaml at main · us/den · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
server:
  host: "0.0.0.0"
  port: 8080
  tls:
    enabled: false
    cert_file: ""
    key_file: ""

runtime:
  backend: "docker"
  docker_host: "" # uses DOCKER_HOST env or default socket
  network_id: "den-net"

sandbox:
  default_image: "den/default:latest"
  default_timeout: "30m"
  max_sandboxes: 50
  default_cpu: 1000000000 # 1 core (in NanoCPUs)
  default_memory: 536870912 # 512MB
  default_pid_limit: 256
  warm_pool_size: 0
  allow_volumes: true
  allow_shared_volumes: true
  allow_s3: true
  allow_s3_fuse: false          # Requires SYS_ADMIN capability
  allow_host_binds: false       # Never enable in production
  max_volumes_per_sandbox: 5
  default_tmpfs:
    - path: "/tmp"
      size: "256m"
    - path: "/home/sandbox"
      size: "512m"
    - path: "/run"
      size: "64m"
    - path: "/var/tmp"
      size: "128m"

store:
  path: "den.db"

auth:
  enabled: false
  api_keys:
    - "your-api-key-here"

log:
  level: "info" # debug, info, warn, error
  format: "text" # text, json

s3:
  endpoint: ""                  # S3-compatible endpoint (e.g. "http://localhost:9000" for MinIO)
  region: "us-east-1"
  access_key: ""
  secret_key: ""