ollama:
  url: http://localhost:11434
  model: qwen2.5:latest
  timeout: 120

server:
  host: 0.0.0.0
  port: 8443
  repo_dir: /var/cache/aur-shield/repo
  work_dir: /var/cache/aur-shield/build
  build_user: nobody  # never build as root

security:
  block_patterns:
    - "curl.*\\|.*bash"
    - "wget.*/tmp/.*\\|.*sh"
    - "eval.*base64"
    - "nc\\s+-.*\\d+"
    - "/dev/tcp/"
    - "systemctl.*enable.*--now"
  max_pkg_size_mb: 500
  allowed_source_schemes:
    - "https"
    - "http"
    - "git"
    - "ftp"
    - "file"

cache:
  ttl_hours: 168  # 7 days
  max_cache_gb: 10

build:
  use_devtools: true  # use extra-x86_64-build chroot if available
  timeout: 600  # 10 min per build