Server configuration - Fused

The standalone launcher reads server.yaml beside the compiled artifact.

apiVersion: harnest.dev/v1alpha1
kind: Server
http:
  host: 127.0.0.1
  port: 8080
  allowRemote: false
  requestTimeoutSeconds: 300
  maxConcurrentRequests: 8
limits:
  maxRequestBytes: 10MiB
playground:
  enabled: true

Server properties

Property	Controls	Default intent
`http.host`	Bind host	Loopback only
`http.port`	Bind port	Local development
`http.allowRemote`	Consent for a non-loopback bind	`false`
`http.requestTimeoutSeconds`	Request timeout	Bounded work
`http.maxConcurrentRequests`	In-process concurrency	Bounded load
`limits.maxRequestBytes`	HTTP body and WebSocket frame size	Bounded memory
`playground.enabled`	Development UI	Enabled locally

Exact ${NAME} values are type-checked environment references. Partial interpolation and missing or invalid values fail at startup.

Configuration boundary

Put in `server.yaml`	Configure elsewhere
Bind address	Authentication
Timeout and concurrency	TLS
Request-size limits	Secrets
Playground toggle	Durable storage
Local operator settings	Replicas and network policy

allowRemote: true only permits the bind. It does not add authentication, TLS, or network policy.

Command flags temporarily override operational properties without changing the compiled source contract.