config.example.yml

@@ -1,13 +1,35 @@
-# Pixa configuration
+# Pixa Example Configuration
-#
-# REQUIRED: Set signing_key before starting the server.
-# Generate with: openssl rand -base64 32
 
+# Server settings
+port: 8080
+debug: false
+maintenance_mode: false
+
+# Data directory for SQLite database and cache files
+state_dir: ./data
+
+# Image proxy settings
+# HMAC signing key for URL signatures (leave empty to require whitelist for all requests)
+# Generate with: openssl rand -base64 32
 signing_key: "CHANGE_ME_generate_with_openssl_rand_base64_32"
 
+# Hosts that don't require signatures
+# Use "." prefix for wildcard subdomain matching (e.g., ".example.com" matches "cdn.example.com")
 whitelist_hosts:
-  - s3.sneak.cloud
   - static.sneak.cloud
   - sneak.berlin
-  - github.com
+  - s3.sneak.cloud
-  - user-images.githubusercontent.com
+
+# Allow HTTP upstream (only for testing, always use HTTPS in production)
+allow_http: false
+
+# Maximum concurrent connections per upstream host (default: 20)
+upstream_connections_per_host: 20
+
+# Sentry error reporting (optional)
+sentry_dsn: ""
+
+# Metrics endpoint authentication (optional)
+# metrics:
+#   username: "admin"
+#   password: "secret"

example-config.yml

@@ -1,34 +0,0 @@
-# Pixa Example Configuration
-
-# Server settings
-port: 8080
-debug: false
-maintenance_mode: false
-
-# Data directory for SQLite database and cache files
-state_dir: ./data
-
-# Image proxy settings
-# HMAC signing key for URL signatures (leave empty to require whitelist for all requests)
-signing_key: "change-me-to-a-secure-random-string"
-
-# Hosts that don't require signatures
-# Use "." prefix for wildcard subdomain matching (e.g., ".example.com" matches "cdn.example.com")
-whitelist_hosts:
-  - static.sneak.cloud
-  - sneak.berlin
-  - s3.sneak.cloud
-
-# Allow HTTP upstream (only for testing, always use HTTPS in production)
-allow_http: false
-
-# Maximum concurrent connections per upstream host (default: 20)
-upstream_connections_per_host: 20
-
-# Sentry error reporting (optional)
-sentry_dsn: ""
-
-# Metrics endpoint authentication (optional)
-# metrics:
-#   username: "admin"
-#   password: "secret"