| 1 |
# Bento daemon-local config (machine paths + listen). Install at |
| 2 |
# ~/.config/bento/bento-daemon.toml. The build matrix lives in the separate |
| 3 |
# topology file (bento.toml). |
| 4 |
# |
| 5 |
# These paths are NOT tilde-expanded by the daemon (it runs without a shell) — |
| 6 |
# use absolute paths. Replace /home/max with the daemon user's home. |
| 7 |
# |
| 8 |
# Auth (CF2): with a non-loopback `listen`, bentod REFUSES to start unless |
| 9 |
# BENTO_API_TOKEN is set (via the service's environment). On the loopback bind |
| 10 |
# below, build triggers are reachable only from this host, so no token is |
| 11 |
# required. To operate over the tailnet, bind the tailnet IP and set |
| 12 |
# BENTO_API_TOKEN (mirror Sando's sando.env model). |
| 13 |
|
| 14 |
listen = "127.0.0.1:8765" |
| 15 |
db_path = "/home/max/.local/state/bento/bento.db" |
| 16 |
topology_path = "/home/max/.config/bento/bento.toml" |
| 17 |
|
| 18 |
# Root of the Syncthing private layer; the recipe `secret()` host function reads |
| 19 |
# credential files (signing keys, notary creds) relative to here. Never logged. |
| 20 |
secrets_root = "/home/max/Code/_private" |
| 21 |
|
| 22 |
# Collected artifacts land at <dist_root>/<app>/<version>/. |
| 23 |
dist_root = "/home/max/Dist" |
| 24 |
|
| 25 |
# Per-step run logs: <logs_root>/<app>/<version>/<target>/<step>.log |
| 26 |
logs_root = "/home/max/.local/state/bento/logs" |
| 27 |
|
| 28 |
# Optional: override the per-step wall-clock budget (seconds) for EVERY step, |
| 29 |
# replacing the per-kind defaults (build 90m, notarize 60m, sign 15m, ...). A |
| 30 |
# step that runs past its budget fails that step and unwinds the recipe, so a |
| 31 |
# hung command can't wedge a build. Leave unset to use the defaults. |
| 32 |
# step_timeout_secs = 5400 |
| 33 |
|
| 34 |
# Pin every build host to the release tag v<version> and verify they all report |
| 35 |
# the same commit before any target builds (default true). Turn off only to |
| 36 |
# build from an untagged commit. |
| 37 |
# pin_release_sha = true |
| 38 |
|
| 39 |
# The command that installs a service binary and restarts its unit, run on the |
| 40 |
# service host with `<staged-binary> <install-path> <unit>` appended. Bento never |
| 41 |
# installs or restarts anything itself: it stages bytes and calls this, and what |
| 42 |
# it calls is a root script that re-checks its own arguments. That way the |
| 43 |
# sudoers grant on a production box is ONE auditable script rather than a broad |
| 44 |
# install + systemctl grant. Only affects `kind = "service"` apps. |
| 45 |
# deploy_installer = "sudo /usr/local/lib/bento/install-service.sh" |
| 46 |
|