48 lines
1.9 KiB
YAML
48 lines
1.9 KiB
YAML
# Example configuration for xworkmate-bridge public ingress and provider sync.
|
|
#
|
|
# Usage:
|
|
# BRIDGE_CONFIG_PATH=config.yaml ./xworkmate-bridge serve
|
|
|
|
# Upstream provider endpoints
|
|
# Priority: YAML > Environment Variable (e.g. CODEX_RPC_URL) > Default Constants
|
|
upstream:
|
|
codex_url: "ws://127.0.0.1:9001"
|
|
gemini_url: "ws://127.0.0.1:8791"
|
|
hermes_url: "ws://127.0.0.1:3920"
|
|
gateway_url: "ws://127.0.0.1:18789/"
|
|
opencode_url: "ws://127.0.0.1:38992"
|
|
|
|
openclaw_gateway:
|
|
max_active: 5
|
|
max_queued: 20
|
|
queue_timeout: "10m"
|
|
|
|
# Lightweight distributed bridge forwarding.
|
|
# cn-xworkmate-bridge.svc.plus can forward task submissions to a peer bridge,
|
|
# including VPN-only endpoints such as WireGuard or WireGuard-over-VLESS
|
|
# addresses that are reachable from this host.
|
|
# Public plaintext HTTP is rejected; use HTTPS on public paths, or HTTP only on
|
|
# loopback/private/link-local VPN addresses where the tunnel provides encryption.
|
|
# The endpoint is the peer bridge base URL; /gateway/openclaw or /acp/rpc is
|
|
# appended from the inbound request path.
|
|
distributed:
|
|
task_forward_endpoint: ""
|
|
# Optional. Defaults to BRIDGE_AUTH_TOKEN when omitted.
|
|
task_forward_token: ""
|
|
|
|
# Legacy/Reference structure (Normally managed via code constants or environment)
|
|
bridge:
|
|
listenAddr: 127.0.0.1:8787
|
|
# Token should be set via BRIDGE_AUTH_TOKEN env for security
|
|
allowedOrigins:
|
|
- https://xworkmate.svc.plus
|
|
- http://localhost:*
|
|
- http://127.0.0.1:*
|
|
|
|
notes:
|
|
- The bridge reads its own auth token from BRIDGE_AUTH_TOKEN.
|
|
- Upstream URLs can include sub-paths which will be preserved during WebSocket handshake.
|
|
- Multi-agent and Single-agent modes will use these endpoints to delegate tasks.
|
|
- Distributed task forwarding rejects public plaintext HTTP; use HTTPS or private VPN HTTP(S) endpoints.
|
|
- task_forward_endpoint can point at a WireGuard-over-VLESS/TCP/TLS local/private bridge address for GFW or carrier UDP blocking environments.
|