config.yaml.example

# Copy to config.yaml and edit. config.yaml is gitignored (may hold secrets).
#
#   cp config.yaml.example config.yaml
#   cp litellm.yaml.example litellm.yaml
#   cp model_list.yaml.example model_list.yaml
#   ./bin/gen-litellm-master-key.sh   # paste same sk-… into config.yaml + litellm.yaml
#
# All three YAML files are required at runtime (copy from *.example). Fail-fast
# if missing. Production: Puppet/hiera/eyaml writes secrets into on-disk YAML.
# Do not rely on environment variables for production secrets.
# Model inventory SoT is model_list.yaml (included by litellm.yaml).

server:
  # Port for the asfquart process. Behind a reverse proxy in production.
  port: 8443

  # PEM files relative to certs/ (see certs/README.md), or absolute paths.
  # Leave both blank for plain HTTP (e.g. behind a reverse proxy with TLS).
  # Local OAuth needs HTTPS + localhost.apache.org — use mkcert as documented.
  certfile: localhost.apache.org+3.pem
  keyfile: localhost.apache.org+3-key.pem

litellm:
  # Always talks to a real LiteLLM admin API (same shape as production).
  # Local: make db && make proxy (system Postgres + litellm.yaml).
  base_url: http://127.0.0.1:4000
  # Same value as litellm.yaml → general_settings.master_key (must start with sk-).
  # Bearer token for /team/* and /key/* from this process.
  master_key: CHANGE_ME_MASTER_KEY
  request_timeout_s: 30

budgets:
  default_team_budget_usd: 100
  duration: 30d

# uids that may view any project's activity (plus asfquart isRoot)
site_admins: []


# Shared model inventory (LiteLLM include + llmao UX). Relative to app root.
models_path: model_list.yaml