opencode-sandbox/opencode-sandbox-config.yaml at main · comsysto/opencode-sandbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# opencode-sandbox configuration
# Changes require a container rebuild: ocs-rebuild-container

sandbox-name: opencode-sandbox

# Outbound HTTP/HTTPS domains allowed via the proxy.
# A leading dot matches the domain and all its subdomains.
http-domain-whitelist:
  - .githubusercontent.com
  - .githubassets.com
  - .github.com
  - .githubcopilot.com
  - mise.run
  - .npmjs.org
  - .maven.org
  # - api.anthropic.com
  # - api.openai.com
  # - .openrouter.ai

# TCP ports on the host the container may reach directly,
# bypassing the proxy (e.g. databases).
host-ports:
  # - 5432
  # - 3306
  # - 6379
  # - 27017

# Host env vars forwarded into the container.
# Both key and value are required: CONTAINER_VAR: HOST_VAR
env-passthrough:
  GH_TOKEN: OPENCODE_SANDBOX_GH_TOKEN
  ECOM_JIRA_API_TOKEN: ECOM_JIRA_API_TOKEN
  # ANTHROPIC_API_KEY: ANTHROPIC_API_KEY
  # OPENAI_API_KEY: OPENAI_API_KEY
  # GH_TOKEN: MY_PROJECT_GH_TOKEN

# Static env vars set in the container. Safe to commit — no secrets here.
env:
  GH_REPO: github.com/comsysto/opencode-sandbox
  GH_HOST: github.com