{
  "enabled": true,
  "network": {
    "allowNetwork": false,
    "allowLocalBinding": false,
    "allowAllUnixSockets": false,
    "allowUnixSockets": [],
    "allowedDomains": [],
    "deniedDomains": []
  },
  "filesystem": {
    "denyRead": ["/Users", "/home"],
    "allowRead": [".", "~/.gitconfig", "/dev/null"],
    "allowWrite": [".", "/dev/null"],
    "denyWrite": ["**/.env", "**/.env.*", "**/*.pem", "**/*.key"]
  }
}