32 lines
1.6 KiB
JSON
32 lines
1.6 KiB
JSON
|
{
|
||
|
|
"permissions": {
|
||
|
|
"allow": [
|
||
|
|
"Bash(xargs ls -la)",
|
||
|
|
"Bash(git add *)",
|
||
|
|
"Bash(git commit -q -m ' *)",
|
||
|
|
"Bash(xargs grep -lE \"^marp:|^---$\")",
|
||
|
|
"Bash(git -C ~/Projects/MakerFLOSS_Troubleshooting push)",
|
||
|
|
"Bash(git -C ~/Projects/MakerFLOSS push)",
|
||
|
|
"Bash(git -C ~/Projects/MakerFLOSS_Troubleshooting rev-parse --show-toplevel)",
|
||
|
|
"Bash(cat \"$\\(git -C ~/Projects/MakerFLOSS_Troubleshooting rev-parse --show-toplevel\\)/.superpowers/sdd/progress.md\")",
|
||
|
|
"Bash(git -C ~/Projects/AnsibleBaobabV4 rev-parse --abbrev-ref HEAD)",
|
||
|
|
"Bash(git -C ~/Projects/AnsibleBaobabV4 status --porcelain)",
|
||
|
|
"Read(//home/sjat/.ansible/vault-keys/**)",
|
||
|
|
"Bash(timeout 8 ssh -p 7576 -o BatchMode=yes -o ConnectTimeout=6 sjat@makerfloss.eu 'echo VPS_OK; docker ps --format \"{{.Names}}\" | grep -c traefik')",
|
||
|
|
"Bash(command -v wg)",
|
||
|
|
"Bash(sudo apt-get install -y wireguard-tools)",
|
||
|
|
"Bash(.venv/bin/ansible-vault view *)",
|
||
|
|
"Bash(.venv/bin/ansible-vault encrypt *)",
|
||
|
|
"Bash(shred -u /dev/shm/secrets.plain.yml)",
|
||
|
|
"Bash(rm -f /dev/shm/secrets.plain.yml)",
|
||
|
|
"Bash(.venv/bin/ansible-playbook play_setup.yml -i inventories/prod/hosts.yml --limit makerfloss -t wireguard-server,firewall)",
|
||
|
|
"Bash(ssh *)",
|
||
|
|
"Bash(.venv/bin/ansible-playbook play_containers.yml -i inventories/prod/hosts.yml --limit makerfloss -t traefik)",
|
||
|
|
"Bash(timeout 12 openssl s_client -connect 88.99.32.236:443 -servername whoami.tappaas.makerfloss.eu)",
|
||
|
|
"Bash(openssl x509 *)",
|
||
|
|
"Bash(grep -qxF '.superpowers/' .git/info/exclude)",
|
||
|
|
"Bash(echo '.superpowers/')"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|