oibot/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Configure Pi guardrails for SSH commands

Browse source
This commit is contained in:
Tobias Ostner 2026-07-30 13:15:44 +07:00
parent f1fc7fa840
commit 648dfc5c18
1 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
module/home-manager.nix
View file

@ -10,6 +10,22 @@
firecrawlApiKey = "$FIRECRAWL_API_KEY"; firecrawlApiKey = "$FIRECRAWL_API_KEY";
firecrawlFreshScrape = true; firecrawlFreshScrape = true;
}; };
home.file.".pi/agent/extensions/guardrails.json".text = builtins.toJSON {
features = {
policies = false;
permissionGate = true;
};
permissionGate = {
requireConfirmation = true;
patterns = [
{
pattern = "(^|[;&|])\\s*(ssh|scp|sftp)(\\s|$)";
description = "SSH connection or file transfer";
regex = true;
}
];
};
};
sops = { sops = {
age.keyFile = "${config.home.homeDirectory}/Library/Application Support/sops/age/keys.txt"; age.keyFile = "${config.home.homeDirectory}/Library/Application Support/sops/age/keys.txt";
@ -122,6 +138,7 @@
"npm:pi-web-access@0.15.0" "npm:pi-web-access@0.15.0"
"npm:pi-mcp-adapter@2.15.0" "npm:pi-mcp-adapter@2.15.0"
"npm:pi-subagents@0.37.2" "npm:pi-subagents@0.37.2"
"npm:@aliou/pi-guardrails@0.16.0"
]; ];
}; };
}; };