config.example.toml

# Rendez-Vous Exec Configuration Example
# Copy this to config.toml and adjust for your needs

[server]
listen_addr = "0.0.0.0:8080"

[security]
# Token files should have 0600 permissions (owner read/write only)
# Generate strong tokens with: openssl rand -base64 32
# Each file should contain one token per line
# Tokens must be at least 32 characters long
client_tokens_file = "tokens/client.tokens"
worker_tokens_file = "tokens/worker.tokens"

[limits]
pair_timeout_ms = 30000

[broker]
url = "ws://localhost:8080"

[client]
# Client token file (for client mode)
# File should have 0600 permissions and contain a token ≥32 characters
# token_file = "tokens/my-client.token"

[worker]
# Worker token file (for worker mode)
# File should have 0600 permissions and contain a token ≥32 characters
# token_file = "tokens/my-worker.token"

[job]
job_category = "compute"

[exec]
# Legacy: allowed commands (deprecated, use command_configs instead)
allowed_commands = ["cat", "sha256sum", "rev", "stockfish", "tty"]

# New: fine-grained command configuration
command_configs = [
    # Example: allow 'echo' command with any arguments
    # { command = "echo", allow_args = true },
    # Example: allow 'ls' with specific arguments only
    # { command = "ls", allow_args = true, allowed_args = ["-la", "-l", "-a"] },
    # Example: limit number of arguments
    # { command = "grep", allow_args = true, max_args = 5 }
]

# Security settings
allow_client_env = false
allow_client_cwd = false

[exec.env]
# Default environment variables for workers
# PATH = "/usr/bin:/bin"