Harden web search and docs defaults

This commit is contained in:
2026-06-24 23:57:44 -07:00
parent 8fcd94d2c5
commit 8237f1331c
19 changed files with 691 additions and 35 deletions

View File

@@ -10,9 +10,19 @@ CONTEXT_KIT_COMPOSE_PROJECT=context-kit
# Local SearXNG port. Bound to 127.0.0.1 only.
CONTEXT_KIT_SEARXNG_PORT=8099
# Local-only SearXNG secret. Set this to any random string if you expose SearXNG
# beyond localhost, which the default setup does not do.
CONTEXT_KIT_SEARXNG_SECRET=change-me-local-only
# Max bytes accepted and downloaded by context-web-search fetch_url.
# Keep this aligned with agent tool-call defaults to avoid schema rejections.
CONTEXT_KIT_WEB_SEARCH_MAX_BYTES=52428800
# Web-search defaults. Search uses SearXNG first, then falls back to
# DuckDuckGo and Bing. Bing requires Chromium inside the web-search image.
CONTEXT_KIT_WEB_SEARCH_PROVIDER=searxng
CONTEXT_KIT_WEB_SEARCH_HTTP_TIMEOUT=15000
CONTEXT_KIT_WEB_SEARCH_MAX_RESULTS=10
CONTEXT_KIT_WEB_SEARCH_CHROME_PATH=/usr/bin/chromium
# User agent used by the Chromium-backed Bing search fallback.
# CONTEXT_KIT_WEB_SEARCH_BROWSER_USER_AGENT="Mozilla/5.0 ..."
# CONTEXT_KIT_WEB_SEARCH_MCP_COMPAT_MODE=legacy
# Long-lived context-docs HTTP MCP service. Bound to 127.0.0.1 only.
CONTEXT_KIT_DOCS_PORT=8776
@@ -33,3 +43,8 @@ CONTEXT_KIT_DOCS_EMBED_MODEL=BAAI/bge-small-en-v1.5
# One or more source files, separated by spaces.
CONTEXT_KIT_DOCS_SOURCES=config/sources.default.txt
# Optional machine-local llms.txt tree. Files are served only inside docs-mcp at
# http://127.0.0.1:8769/ so absolute local paths do not leak into source files.
# CONTEXT_KIT_DOCS_LOCAL_SOURCES_DIR=/path/to/context-kit-local-sources
# CONTEXT_KIT_DOCS_LOCAL_SOURCES_PORT=8769