Configuration

The Architect Agent loads config.toml at startup. Any change requires an Agent restart.

Values below are the defaults the Agent applies when a key is omitted or set to zero. Commented lines are optional.

Default configuration

[config_system]
# When true, force-kill during an in-flight startup terminates a running
# pre-start lifecycle script immediately. Default false: scripts finish
# naturally; subsequent start work is still suppressed.
# force_kill_allow_script_termination = false

[authorization]
license_key = "<license_key>"

# disable_remote_root = false
# fail2ban_attempts = 5
# fail2ban_ban_time = 60

[logging]
# verbose = false
# verbose_log_rpc = false
# audit_logs_retention = 30

[filesystem]
agent_dir = "<installation_directory>"

# max_manager_download_size = 30
# database_dir = ""
# database_backup_interval = 3
# log_dir = ""
# deployments_dir = ""
# cache_dir = ""
# certs_dir = ""
# backups_dir = ""
# plugins_dir = ""
# backups_vss = false
# python_path = ""

[immutable_deployments]
# enabled = false
# mode = "whitelist"

[http_server]
address = "0.0.0.0"
port = 8090
use_ssl = true
# ssl_cert_file = ""
# ssl_cert_key_file = ""

[steam_servers]
# chunk_download_timeout = 60
# download_batch_size = 60
# max_downloads_per_cdn = 32
# disable_buffered_download = false
# use_http2 = false
# repopulation_cycle = 24
# reinclusion_period = 1
# update_reconciliation_timer = 30

[dayz]
# dzsa_launcher_update_enable = false
# dzsa_launcher_update = 600
# priority_update_interval = 300

[rcon]
# disable_rcon = false
# rcon_ip_address = ""
# connection_timeout = 180

[cloud_controller]
# keepalive = false
# keepalive_interval = 60

[database]
# metrics_retention_days = 7

[windows]
# powershell_execution_policy = "Bypass"
# start_server_non_interactive = false
# session_username = ""
# start_server_as_system = true
# force_timer_resolution = false

[steam_plugin]
# enabled = false
# plugin = ""
# username = ""

[mcp]
# enabled = false
# read_only = false

Defaults that differ from older docs

Steam download tuning is covered in Optimizing Steam download speed.

Force-kill and lifecycle scripts

By default, a force-kill while a server is still starting does not interrupt a running pre-start lifecycle script. The script is allowed to finish. The Agent then abandons the start.

Set force_kill_allow_script_termination = true under [config_system] to terminate that script immediately. See Lifecycle Hooks.

Backups and Volume Shadow Copy (Windows)

By default (backups_vss = false under [filesystem]), server backups zip files from the live deployment. Locked files that cannot be opened are skipped.

Set backups_vss = true to create a Windows Volume Shadow Copy first. See Backup Management.

Windows process start

start_server_as_system defaults to true. Game server processes then start in the Windows service session, the same way PsExec -i -s does. Set it to false only when you need a different start path.

force_timer_resolution, when true, requests a 1 ms timer inside each game-server process. The default is false. The Agent already requests a high-resolution timer for itself.

Interactive desktop consoles are configured with start_server_non_interactive and session_username. See Windows Interactive Processes.

Immutable deployments

[immutable_deployments] can lock which deployment paths the Agent is allowed to change.

• enabled turns the check on
• mode is whitelist or blacklist

Any other mode turns the feature off.

Other optional paths

• filesystem.plugins_dir overrides the plugins directory. The default is plugins inside the Agent directory.
• filesystem.python_path selects the Python interpreter used for lifecycle hooks. When empty, the Agent searches PATH.
• logging.verbose_log_rpc turns on extra RPC logging.
• http_server.ssl_cert_file and ssl_cert_key_file point at custom certificates. The defaults are cert.pem and cert.key.pem in the certs directory.

Steam plugin

[steam_plugin] is off when omitted. enabled, plugin, and username turn on the local Steam plugin. See Steam plugin.

MCP

[mcp] is off when omitted. enabled turns on /mcp. read_only rejects write commands. See MCP.