How Binions is configured: first boot, TOML config, service users & systemd, TLS, secrets, bind addresses, backup, and observability.
Binions is configured with plain files and a few simple tools. Each daemon installs and provisions itself, so there is little to wire up by hand — but everything is open to you: TOML config files, a per-daemon secrets directory, hardened systemd services, edge TLS, and optional tracing. This section explains each part and how to change it.
Sensible defaults, full control. A fresh install runs with safe defaults — locked-down service users, generated secrets, loopback-only internal services, and TLS at the edge. Configure only what you need; your changes are preserved across upgrades.