mooncode/mooncode.example.yaml at main · fuchencong/mooncode · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
http:
  address: ":8080"
  max_body_bytes: 1048576
  request_timeout: 30s

database:
  url: postgres://mooncode:change-me@127.0.0.1:5432/mooncode?sslmode=disable
  migrate_on_start: true
  max_connections: 20

auth:
  # Only trust these headers after a reverse proxy has stripped client values
  # and copied Tinyauth's ForwardAuth response headers.
  issuer: tinyauth
  app_url: https://mooncode.example.com/app
  logout_url: /api/user/logout
  registration_mode: public
  terms_version: "2026-07-30"
  privacy_version: "2026-07-30"
  trusted_proxy_cidrs:
    - 10.0.0.2/32
  csrf_key: REPLACE_WITH_BASE64_32_BYTE_KEY

secrets:
  key: REPLACE_WITH_A_DISTINCT_BASE64_32_BYTE_KEY
  key_version: 1

repository:
  root: /var/lib/mooncode/repositories
  worktree_max_age: 24h
  max_mirror_bytes: 10737418240
  max_per_workspace: 100

hatchet:
  token: REPLACE_WITH_HATCHET_CLIENT_TOKEN
  address: hatchet:7077
  namespace: mooncode

analysis:
  scc_path: scc
  timeout: 15m
  max_output_bytes: 16777216
  max_concurrent_per_workspace: 10

metrics:
  # Worker-only health and Prometheus endpoint; keep on the private service network.
  worker_address: ":9090"