{
  "permissions": {
    "allow": [
      "WebSearch",
      "WebFetch(domain:docs.docker.com)",
      "WebFetch(domain:hub.docker.com)",
      "WebFetch(domain:caddyserver.com)",
      "WebFetch(domain:docs.nextcloud.com)",
      "Bash(git log:*)",
      "Bash(git diff:*)",
      "Bash(git status:*)"
    ],
    "deny": [
      "Bash(ssh:*)",
      "Bash(rm -rf:*)",
      "Bash(docker system prune:*)",
      "Bash(docker volume rm:*)",
      "Bash(docker compose down:*)",
      "Bash(docker stop:*)",
      "Bash(docker rm:*)",
      "Bash(scp:*)",
      "Bash(rsync:*)",
      "Bash(curl -X POST:*)",
      "Bash(curl -X DELETE:*)",
      "Bash(git push:*)",
      "Bash(git reset --hard:*)",
      "Bash(git clean:*)"
    ]
  }
}