{
  "permissions": {
    "allow": [
      "Bash(xargs ls -la)",
      "Bash(git add *)",
      "Bash(git commit -q -m ' *)",
      "Bash(xargs grep -lE \"^marp:|^---$\")",
      "Bash(git -C ~/Projects/MakerFLOSS_Troubleshooting push)",
      "Bash(git -C ~/Projects/MakerFLOSS push)",
      "Bash(git -C ~/Projects/MakerFLOSS_Troubleshooting rev-parse --show-toplevel)",
      "Bash(cat \"$\\(git -C ~/Projects/MakerFLOSS_Troubleshooting rev-parse --show-toplevel\\)/.superpowers/sdd/progress.md\")",
      "Bash(git -C ~/Projects/AnsibleBaobabV4 rev-parse --abbrev-ref HEAD)",
      "Bash(git -C ~/Projects/AnsibleBaobabV4 status --porcelain)",
      "Read(//home/sjat/.ansible/vault-keys/**)",
      "Bash(timeout 8 ssh -p 7576 -o BatchMode=yes -o ConnectTimeout=6 sjat@makerfloss.eu 'echo VPS_OK; docker ps --format \"{{.Names}}\" | grep -c traefik')",
      "Bash(command -v wg)",
      "Bash(sudo apt-get install -y wireguard-tools)",
      "Bash(.venv/bin/ansible-vault view *)",
      "Bash(.venv/bin/ansible-vault encrypt *)",
      "Bash(shred -u /dev/shm/secrets.plain.yml)",
      "Bash(rm -f /dev/shm/secrets.plain.yml)",
      "Bash(.venv/bin/ansible-playbook play_setup.yml -i inventories/prod/hosts.yml --limit makerfloss -t wireguard-server,firewall)",
      "Bash(ssh *)",
      "Bash(.venv/bin/ansible-playbook play_containers.yml -i inventories/prod/hosts.yml --limit makerfloss -t traefik)",
      "Bash(timeout 12 openssl s_client -connect 88.99.32.236:443 -servername whoami.tappaas.makerfloss.eu)",
      "Bash(openssl x509 *)",
      "Bash(grep -qxF '.superpowers/' .git/info/exclude)",
      "Bash(echo '.superpowers/')"
    ]
  }
}