# Package defaults for every project. Projects add their own rules in
# .opencode-sandbox/egress.conf (format: see lib/egress.sh).

# `opencode pair --remote` would expose the agent's server to the internet
block .opentunnel.xyz
# Reserved test domain for the self-test
block .example-blocked.invalid

expect-block http://example-blocked.invalid/
expect-block https://opentunnel.xyz/
expect-pass  https://example.com/