docker-skit.toml

# SPDX-FileCopyrightText: © 2025 StreamKit Contributors
#
# SPDX-License-Identifier: MPL-2.0

# Default configuration shipped in the official Docker images.
#
# This intentionally avoids any dependency on private/internal demo assets and
# avoids implicit admin privileges for unauthenticated users.

[server]
address = "0.0.0.0:4545"
samples_dir = "/opt/streamkit/samples/pipelines"
max_body_size = 104857600

# MoQ Gateway URL for the frontend to connect via WebTransport
# Default assumes Docker is running locally with ports mapped to localhost
# Override with SK_SERVER__MOQ_GATEWAY_URL env var for remote deployments
moq_gateway_url = "http://127.0.0.1:4545/moq"

[auth]
# Built-in authentication is enabled by default when binding non-loopback addresses (auth.mode=auto).
mode = "auto"
# Keep auth state under /opt/streamkit so it's easy to persist via a single volume mount.
state_dir = "/opt/streamkit/.streamkit/auth"

[plugins]
directory = "/opt/streamkit/plugins"

[log]
console_enable = true
file_enable = false
console_level = "info"

[telemetry]
enable = true
tokio_console = false

[engine]
packet_batch_size = 8
node_input_capacity = 8
pin_distributor_capacity = 4

[resources]
keep_models_loaded = true

[resources.prewarm]
enabled = false

[permissions]
# NOTE: When built-in auth is enabled, unauthenticated requests are rejected and `default_role`
# is not used. This only applies when auth is disabled.
default_role = "user"
# allow_insecure_no_auth = true # Unsafe: only enable if you intentionally disable auth on 0.0.0.0