kore

kore / home / features / cli / opencode.nix25 lines · 443B · raw

1{
2  programs.opencode = {
3    enable = true;
4    web.enable = false;
5
6    settings = {
7      # go fuck ur self
8      formatter = {
9        disabled = true;
10      };
11      permission = {
12        webfetch = "ask";
13        read = {
14          "*.env" = "deny";
15          "*.env.*" = "deny";
16          "*.env.example" = "allow";
17        };
18        bash = {
19          "curl *" = "deny";
20          "git *" = "deny";
21        };
22      };
23    };
24  };
25}