Configuration Overview

PasteGuard is configured via config.yaml. Copy from the example:

cp config.example.yaml config.yaml

Mode

Privacy mode determines how PII is handled.

mode: mask

Value	Description
`mask`	Replace PII with placeholders, send to provider, restore in response
`route`	PII requests stay on your local LLM (Ollama, vLLM, llama.cpp), others go to your configured provider

See Mask Mode and Route Mode for details.

server:
  port: 3000
  host: "0.0.0.0"

Option	Default	Description
`port`	`3000`	HTTP port
`host`	`0.0.0.0`	Bind address

dashboard:
  enabled: true
  auth:
    username: admin
    password: ${DASHBOARD_PASSWORD}

Option	Default	Description
`enabled`	`true`	Enable dashboard at `/dashboard`
`auth.username`	-	Basic auth username
`auth.password`	-	Basic auth password

Use ${VAR} or ${VAR:-default} syntax:

providers:
  upstream:
    api_key: ${OPENAI_API_KEY}

pii_detection:
  presidio_url: ${PRESIDIO_URL:-http://localhost:5002}