greenhouse

kore

my public infrastructure monorepo

git clone [email protected]:kore.git

kore / home / features / cli / opencode.nix23 lines · 417B · raw

1{
2  programs.opencode = {
3    enable = true;
4    web.enable = false;
5
6    settings = {
7      # go fuck ur self
8      #formatter = "false";
9      permission = {
10        webfetch = "ask";
11        read = {
12          "*.env" = "deny";
13          "*.env.*" = "deny";
14          "*.env.example" = "allow";
15        };
16        bash = {
17          "curl *" = "deny";
18          "git *" = "deny";
19        };
20      };
21    };
22  };
23}