Explita InfraExplita Infra
DeployCLI Reference

eda config

Manage client-side deployment server URLs, authentication tokens, and local project bindings

eda config

The eda config command group manages local workstation settings and project bindings for Explita Deploy. Configuration is split into global user settings (~/.explita/config.json) and project-level settings (explita.json).

eda config [subcommand]
explita deploy config [subcommand]

1. Subcommands Overview

CommandDescription
eda config / eda config lsDisplay active global and project-level configuration.
eda config get <key>Query the value of a specific configuration key.
eda config set <key> <val>Update a global or project-level configuration key.
eda config pathPrint the filesystem paths of global and local config files.

2. Supported Configuration Keys

KeyScopeDescriptionExample
serverGlobalRemote deployment control plane API URL.http://198.51.100.42:39756
tokenGlobalHost authentication bearer token (DEPLOY_TOKEN).sec_98f4a...
nameLocalProject application name.payment-api
portLocalContainer listening port.8080
appIdLocalUnique remote application ID.app_9f3a12
cronsLocalConfigured background cron jobs.[...]

3. Usage Examples

# View all active settings
eda config ls

# Set remote server address
eda config set server http://198.51.100.42:39756

# Set host authentication token
eda config set token sec_your_deploy_token_here

# Query specific setting
eda config get server

# Show paths to configuration files on disk
eda config path

4. Zero-Disk Passcode Security Boundary

[!IMPORTANT] Passcodes and PINs are strictly prohibited from configuration files. To preserve the security boundary of secondary authentication, passcodes (DEPLOY_PASSCODE) are never stored in configuration files (they are known strictly to the human operator in memory).

If a server enforces passcode authentication:

  1. In interactive terminals, eda prompts:
    🔑 Enter deploy passcode / PIN:
  2. In non-interactive CI/CD scripts or commands, supply it inline in memory:
    eda promote d79 --pass secret-pin-9876

The passcode is never written to disk, so compromised workstations or leaked repositories will not expose the host.

On this page