1 files changed, 52 insertions, 0 deletions
diff --git a/default.yml b/default.yml
new file mode 100644
index 0000000..8bc019c
--- /dev/null
+++ b/default.yml
@@ -0,0 +1,52 @@
+#  ____                      _       _ _
+# / ___| _ __   _____      _(_) __ _(_) |
+# \___ \| '_ \ / _ \ \ /\ / / |/ _` | | |
+#  ___) | | | | (_) \ V  V /| | (_| | | |
+# |____/|_| |_|\___/ \_/\_/_/ |\__,_|_|_|
+#                         |__/
+#
+# Snowjail Default Configuration File
+#   generated by Snowjail version $VERSION$
+
+# Number of CPU cores that the jailed application is allowed to use.
+# 2.5 would allow the application to entirely use 2 cores and use half another core
+# Use -1 to allow full CPU usage
+cpu: -1
+
+# In megabytes, the maximum RAM the jailed application can use.
+# The application will be killed if it tries to use more memory than allowed.
+# Use -1 to allow full RAM usage
+ram: -1
+
+# Whether the RAM limit (set in the option above) should be enforced.
+# When disabled, memory requests MAY be denied but will not always be denied
+enforce_ram: false
+
+# In megabytes, the maximum swap memory the jailed application can use.
+# The application will be killed if it tries to use more swap than allowed and the memory is full.
+# Use -1 to allow full swap usage (as much as the host system allows)
+swap: -1
+
+# Whether allow writing to the application's directory or not
+# Make sure your application supports running from a read-only directory before disabling this option
+readwrite: true
+
+# Whether allow this application to access the system's hardware or not.
+# This WILL reduce security as it can be used to bypass jailing
+hardware: false
+
+# The base Docker image to be used for the jail.
+# Snowjail recommends using 'ubuntu:latest'
+image: ubuntu:latest
+
+# An array of commands to execute once the jail is running.
+# Command is an array of arguments.
+# Index 0 is the command, index 1 and onwards are arguments.
+# The jail will be destroyed once the last command is terminated.
+commands:
+  - ["bash"]
+
+# Ports to forward to the host.
+# The left part is port on the host, the right part is port on the guest
+ports:
+  - 8081:8081
+\ No newline at end of file