Configuration Reference¶

[server]
host = "0.0.0.0"              # Bind address
port = 9090                    # HTTP port
workers = 4                    # Worker threads (default: CPU count)
request_timeout_secs = 300     # Request timeout
cors_origins = ["*"]           # CORS allowed origins

[runtime]
backend = "local"                          # "local", "docker", "opensandbox", "kubernetes", "ec2"
# opensandbox_url = "http://localhost:8000"   # OpenSandbox API URL
# opensandbox_api_key = "${OPENSANDBOX_API_KEY}"  # Optional API key

# [runtime.kubernetes]
# namespace = "ciab-agents"
# agent_image = "ghcr.io/shakedaskayo/ciab-claude:latest"
# runtime_class = "kata-containers"         # Optional: Kata Containers
# storage_class = "standard"
# workspace_pvc_size = "10Gi"

# [runtime.ec2]
# region = "us-east-1"
# default_ami = "ami-0abcdef1234567890"
# instance_type = "t3.medium"
# subnet_id = "subnet-0123456789abcdef0"
# security_group_ids = ["sg-0123456789abcdef0"]
# ssh_user = "ubuntu"
# root_volume_size_gb = 30

# [packer]
# template_source = "builtin://default-ec2"
# default_region = "us-east-1"
# build_instance_type = "t3.medium"
# auto_install = true

[agents]
default_provider = "claude-code"   # Default agent provider

[agents.providers.claude-code]
enabled = true
image = "ghcr.io/shakedaskayo/ciab-claude:latest"
default_model = "claude-sonnet-4-20250514"
api_key_env = "ANTHROPIC_API_KEY"

[agents.providers.codex]
enabled = true
image = "ghcr.io/shakedaskayo/ciab-codex:latest"
api_key_env = "OPENAI_API_KEY"

[agents.providers.gemini]
enabled = false
image = "ghcr.io/shakedaskayo/ciab-gemini:latest"
api_key_env = "GOOGLE_API_KEY"

[agents.providers.cursor]
enabled = false
image = "ghcr.io/shakedaskayo/ciab-cursor:latest"
api_key_env = "CURSOR_API_KEY"

[credentials]
backend = "sqlite"                     # Storage backend
encryption_key_env = "CIAB_ENCRYPTION_KEY"  # Env var with AES key

[provisioning]
timeout_secs = 300                     # Max provisioning time
max_script_size_bytes = 1048576        # Max script size (1MB)

[streaming]
buffer_size = 500                      # Events buffered per sandbox
keepalive_interval_secs = 15           # SSE heartbeat interval
max_stream_duration_secs = 3600        # Max SSE connection duration

[security]
api_keys = []                          # API keys (empty = auth disabled)
drop_capabilities = ["NET_RAW", "SYS_ADMIN"]  # Linux capabilities to drop

[logging]
level = "info"                         # Log level: trace, debug, info, warn, error
format = "json"                        # Log format: json, pretty

# Optional OAuth configuration
# [oauth.providers.github]
# client_id = "${GITHUB_CLIENT_ID}"
# client_secret_env = "GITHUB_CLIENT_SECRET"
# auth_url = "https://github.com/login/oauth/authorize"
# token_url = "https://github.com/login/oauth/access_token"
# scopes = ["repo", "read:org"]
# redirect_uri = "http://localhost:9090/api/v1/oauth/github/callback"