sandbox.conf.example

# Copy this file to `sandbox.conf` and edit. Every value is optional.
# sandbox.conf is git-ignored so your local settings stay out of the repo.

# Name of the sandbox (default: sbx-<repo-folder-name>)
# SANDBOX_NAME=sbx-myproject

# Which agent to run. Docker Sandboxes supports several out of the box.
# Common choices: claude, codex, opencode, gemini, copilot, cursor, droid, kiro, shell
# AGENT=claude

# Repo the agent operates on (default: the current directory)
# REPO_DIR=/absolute/path/to/repo

# Global Docker Sandboxes network policy to initialize on first use.
# One of: allow-all, balanced, deny-all
# GLOBAL_NETWORK_POLICY=balanced

# Git difftool used by `code-airlock review`.
# Common choices: vscode, opendiff, vimdiff
# REVIEW_TOOL=vscode

# tmux session used by `code-airlock --tmux up`.
# TMUX_SESSION=code-airlock-sbx-myproject

# Attach immediately after starting a tmux-backed run. Set to 0 for unattended runs.
# TMUX_ATTACH=1

# Copy curated user-level agent config into new sandboxes before launch.
# This copies behavior/instruction files only, not auth/history/cache paths.
# SEED_CONFIG=0

# Comma-separated extra paths under $HOME to copy into matching /home/user paths.
# Secret-like paths such as auth.json, token files, history, logs, cache, and
# node_modules are skipped.
# SEED_PATHS=$HOME/.codex/config.toml,$HOME/.claude/settings.json

# Import commits from initialized submodules when running fetch/diff/review/merge.
# Set to 0 for parent-repo-only fetch behavior.
# FETCH_SUBMODULES=1

# Branch name used by `code-airlock pr` (default: code-airlock/<sandbox-name>)
# PR_BRANCH=my-feature-branch

# Comma-separated network allowlist. Under `lockdown` (deny-all default),
# the sandbox can reach only these hosts. Add the registries and APIs your
# build actually needs. A few common extras are shown commented below.
# Default covers Claude, Codex, GitHub, and npm. For OpenCode, include the
# provider hosts you actually use.
# ALLOW=api.anthropic.com,*.anthropic.com,api.openai.com,*.openai.com,github.com,*.github.com,codeload.github.com,objects.githubusercontent.com,registry.npmjs.org,*.npmjs.org,*.pypi.org,files.pythonhosted.org,static.crates.io,index.crates.io