Security and Infrastructure
Manage gateway settings, logging, storage, authentication, TLS, safe binaries, telemetry and rate limits across a self-hosted CommandLyne deployment.
Overview
Security and Infrastructure settings control how the agent communicates, stores data, authenticates users, and operates safely.
Gateway
Configure:
-
- Host and port
- Public URL
- Gateway bind
- Reload mode
- Execution mode
Logging
Configure:
-
- Console log level
- Diagnostic log export
- File log level
Sensitive information such as API keys and tokens is automatically stripped from diagnostic logs.
Storage
Configure:
-
- Data directory
- Workspace directory
- Storage mode
Storage mode options from the guide include:
-
- JSON
- SQLite
- LanceDB
Security
Configure:
-
- Gateway authentication mode
- PIN settings
- Gateway token
TLS
TLS enables HTTPS encryption.
You can configure:
-
- Enable TLS
- Certificate file
- Key file
- Auto certificate
- Certificate directory
- Manual certificate upload
Advanced Controls
Advanced settings include:
-
- Retry and rate limit
- Heartbeat
- Telemetry
- DNS Discovery
- Safe Bins
Safe Bins
Safe Bins restrict which system binaries the agent can execute.
Examples:
-
- python
- node
- git
This helps reduce security risk and supports controlled execution.

