| 1 |
# Bento daemon-local config (machine paths + listen). Install at |
| 2 |
# ~/.config/bento/bento-daemon.toml. The build matrix lives in the separate |
| 3 |
# topology file (bento.toml). |
| 4 |
# |
| 5 |
# These paths are NOT tilde-expanded by the daemon (it runs without a shell) — |
| 6 |
# use absolute paths. Replace /home/max with the daemon user's home. |
| 7 |
# |
| 8 |
# Auth (CF2): with a non-loopback `listen`, bentod REFUSES to start unless |
| 9 |
# BENTO_API_TOKEN is set (via the service's environment). On the loopback bind |
| 10 |
# below, build triggers are reachable only from this host, so no token is |
| 11 |
# required. To operate over the tailnet, bind the tailnet IP and set |
| 12 |
# BENTO_API_TOKEN (mirror Sando's sando.env model). |
| 13 |
|
| 14 |
listen = "127.0.0.1:8765" |
| 15 |
db_path = "/home/max/.local/state/bento/bento.db" |
| 16 |
topology_path = "/home/max/.config/bento/bento.toml" |
| 17 |
|
| 18 |
# Root of the Syncthing private layer; the recipe `secret()` host function reads |
| 19 |
# credential files (signing keys, notary creds) relative to here. Never logged. |
| 20 |
secrets_root = "/home/max/Code/_private" |
| 21 |
|
| 22 |
# Collected artifacts land at <dist_root>/<app>/<version>/. |
| 23 |
dist_root = "/home/max/Dist" |
| 24 |
|
| 25 |
# Per-step run logs: <logs_root>/<app>/<version>/<target>/<step>.log |
| 26 |
logs_root = "/home/max/.local/state/bento/logs" |
| 27 |
|