# Purpose: the settings compose-sandbox.yaml reads. Copy this file to `.env` beside it and # fill in the empty lines. Nothing here is a secret except the gateway key, which # you generate on the gateway rather than copy from anywhere. # Platform: all # Minimum memory: 8 GB # Assumes: `cp env-example.txt .env` and then an editor. Docker Compose reads `.env` # automatically from the directory you run it in. # ------------------------------------------------------------------- what the agent sees # Absolute path to the one project the agent may edit. This is the whole of its writable # world, so point it at a directory you would be comfortable letting a program rewrite. # Do not point it at a parent directory "just in case": every extra directory here is an # extra thing the boundary does not protect. PROJECT_DIR= # Absolute path to the read-only task material, mounted at /task. For the lab this is the # directory holding task-readme.md, task-app.py and task-tests.py. TASK_DIR= # ---------------------------------------------------------------------------- the model # The gateway's address as seen from inside the sandbox network. When the gateway # container is attached to the same network, this is its Compose service name and port, # for example http://gateway:4000/v1 rather than a loopback address, because inside the # container 127.0.0.1 is the container itself. GATEWAY_URL= # The alias the agent should ask for. One of the names published by the Part 9 gateway. MODEL_ALIAS=local/coder # A virtual key generated on the gateway for this sandbox alone, scoped to the aliases the # agent needs and nothing else. Generate it with the gateway project's key-generation # call. Do not paste a key you use anywhere else: the point of a per-sandbox key is that # revoking it costs you nothing. AGENT_GATEWAY_KEY= # ------------------------------------------------------------------------ resource caps # Not security boundaries. They are what stops a runaway agent, running your test suite in # a loop, from making the rest of the machine unusable while it does it. Pick values that # leave the engine and your desktop room to work. AGENT_MEMORY_LIMIT=4g AGENT_CPU_LIMIT=2.0