arch_agent
adee5dfc78
- FastAPI server with scan/build/repo endpoints - LLM scanner (Ollama) with regex pre-scan - makepkg/devtools builder with chroot isolation - Scan cache with TTL + PKGBUILD hash - Client installer + safe-yay wrapper - Docs + config example
35 lines
690 B
YAML
35 lines
690 B
YAML
ollama:
|
|
url: http://localhost:11434
|
|
model: qwen2.5:latest
|
|
timeout: 120
|
|
|
|
server:
|
|
host: 0.0.0.0
|
|
port: 8443
|
|
repo_dir: /var/cache/aur-shield/repo
|
|
work_dir: /var/cache/aur-shield/build
|
|
build_user: nobody # never build as root
|
|
|
|
security:
|
|
block_patterns:
|
|
- "curl.*\\|.*bash"
|
|
- "wget.*/tmp/.*\\|.*sh"
|
|
- "eval.*base64"
|
|
- "nc\\s+-.*\\d+"
|
|
- "/dev/tcp/"
|
|
- "systemctl.*enable.*--now"
|
|
max_pkg_size_mb: 500
|
|
allowed_source_schemes:
|
|
- "https"
|
|
- "http"
|
|
- "git"
|
|
- "ftp"
|
|
- "file"
|
|
|
|
cache:
|
|
ttl_hours: 168 # 7 days
|
|
max_cache_gb: 10
|
|
|
|
build:
|
|
use_devtools: true # use extra-x86_64-build chroot if available
|
|
timeout: 600 # 10 min per build |