Configuration

Configuration comes from three layers, each overriding the last: a YAML file, ANY_* environment variables, then command-line flags. A missing file is not an error — every key has a default, and a bare any run works (with several accounts in the root and no selector it starts unauthorized and waits for POST /v1/auth). This page is the any server's; the runtime has its own anybao.toml.

Local embeddings

The one setting most installs change: the default index.embedder: auto embeds through the online primary and falls back to the local model, local keeps every embedding on the device. Save this as any-config.yml:

index:
  embedder: local

any run --config ./any-config.yml

The GGUF downloads on first boot if it is not in the root's model cache; full-text search works while it downloads and vector search reports unavailable until the model and the llama.cpp libraries are in place (Embedders — model, platforms, other providers). The key governs search embeddings only: the sync network is nodeconf, and an agent's models are anyrt's.

Sources and precedence

1. File — --config PATH, else the first of $XDG_CONFIG_HOME/any/config.yaml, ~/.config/any/config.yaml, <data-dir>/config.yaml.
2. Environment — prefix ANY_, underscores map to nested keys (ANY_LISTEN_ADDR → listen.addr).
3. Flags — override both.

ANY_LOG_LEVEL=debug any run --config ./any-config.yml --addr 127.0.0.1:7002

Server flags

CLI (client) flags: --addr (default: the address the running server recorded in server.addr, else 127.0.0.1:7001), --timeout (default 30s), --verbose (log the HTTP exchange to stderr), --control-token / ANY_CONTROL_TOKEN (a managed server's control token).

Core keys

The passkey is the one secret the server may need at boot. It arrives from the env var named by auth.passkeyEnv or from --passkey-stdin — never an interactive prompt, so the server runs under a supervisor or a shell pipeline. Without either the wallet must be plain.

Local network (p2p)

Search index

Files and push

A complete example

A staging nodeconf, local embeddings, periodic file-cache cleanup and a log file (paths are yours to replace):

dataDir: ~/.any
listen:
  addr: 127.0.0.1:7001
network:
  nodeconfPath: /etc/any/nodeconf.yaml     # omit to join production
index:
  embedder: local
  search:
    adaptiveWeights: true
files:
  gcInterval: 1h
log:
  defaultLevel: info
  outputPaths: ["/var/log/any/server.log"]

Note. With nothing configured the binary joins the production any-sync network from an embedded node configuration. Tests and staging setups must point network.nodeconfPath (or ANY_NETWORK_NODECONF_PATH) elsewhere — see Networks.

First run

any init with no config and no data dir creates ~/.any/ (mode 0700), generates an account under ~/.any/<accountId>/wallet.key (plain unless ANY_WALLET_PASSKEY is set) and prints the mnemonic to stderr once. --mnemonic / --mnemonic-stdin derive an existing account instead — same phrase, same account id, fresh device key. any run on a fresh root starts unauthorized and waits for POST /v1/auth, the HTTP flavour of init for UI onboarding; a managed server starts that way on every launch (Accounts).

The full key list with every environment variable is also in the config reference.