### 000-allow-local-networks.json
{
  "name": "000-allow-local-networks",
  "enabled": true,
  "precedence": true,
  "nolog": true,
  "action": "allow",
  "duration": "always",
  "operator": {
    "type": "regexp",
    "operand": "dest.ip",
    "sensitive": false,
    "data": "^(127\\.|10\\.|192\\.168\\.|172\\.(1[6-9]|2[0-9]|3[01])\\.|169\\.254\\.|::1$|fe80:|f[cd][0-9a-f][0-9a-f]:|22[4-9]\\.|23[0-9]\\.|ff0)"
  }
}

### 001-allow-infra-ports.json
{
  "name": "001-allow-infra-ports",
  "enabled": true,
  "precedence": true,
  "nolog": true,
  "action": "allow",
  "duration": "always",
  "operator": {
    "type": "regexp",
    "operand": "dest.port",
    "sensitive": false,
    "data": "^(53|67|68|123|5353)$"
  }
}

### 010-allow-known-hosts.json
{
  "name": "010-allow-known-hosts",
  "enabled": true,
  "precedence": false,
  "nolog": false,
  "action": "allow",
  "duration": "always",
  "operator": {
    "type": "regexp",
    "operand": "dest.host",
    "sensitive": false,
    "data": "(^|\\.)(npmjs\\.org|npmjs\\.com|yarnpkg\\.com|nodejs\\.org|bun\\.sh|oven\\.sh|pypi\\.org|pythonhosted\\.org|crates\\.io|rustup\\.rs|golang\\.org|go\\.dev|github\\.com|githubusercontent\\.com|githubassets\\.com|github\\.io|ghcr\\.io|docker\\.io|docker\\.com|quay\\.io|k8s\\.io|gcr\\.io|cloudflare\\.com|cloudflare-dns\\.com|cloudflareaccess\\.com|cloudflarestorage\\.com|workers\\.dev|pages\\.dev|neon\\.tech|anthropic\\.com|claude\\.ai|openai\\.com|oaistatic\\.com|chatgpt\\.com|debian\\.org|ubuntu\\.com|canonical\\.com|pki\\.goog|letsencrypt\\.org|sentry\\.io|statsig\\.com)$"
  }
}

### 020-allow-system-daemons.json
{
  "name": "020-allow-system-daemons",
  "enabled": true,
  "precedence": false,
  "nolog": true,
  "action": "allow",
  "duration": "always",
  "operator": {
    "type": "regexp",
    "operand": "process.path",
    "sensitive": false,
    "data": "^(/usr/lib/apt/methods/|/usr/bin/apt|/usr/bin/dpkg|/usr/lib/systemd/systemd-(resolved|timesyncd|networkd)|/usr/sbin/(chronyd|NetworkManager)|/usr/bin/fwupdmgr|/usr/libexec/fwupd/fwupd|/usr/lib/packagekit/|/usr/bin/gnome-software|/usr/libexec/(geoclue|GeoClue))"
  }
}

### allow-always-simple-home-user-cache-ms-playwright-chromium-headless-shell-1228-chrome-headless-shell-linux64-chrome-headless-she.json
{
  "created": "2026-07-12T11:20:05+07:00",
  "updated": "2026-07-12T11:20:05+07:00",
  "name": "allow-always-simple-home-user-cache-ms-playwright-chromium-headless-shell-1228-chrome-headless-shell-linux64-chrome-headless-she",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/home/user/.cache/ms-playwright/chromium_headless_shell-1228/chrome-headless-shell-linux64/chrome-headless-shell",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}
### allow-always-simple-home-user-projects-zync-is-tmp-wt-zync-os-mobile-t16-node-modules-pnpm-turbo-linux-64-2-10-2-node-modules-tu.json
{
  "created": "2026-07-12T11:33:15+07:00",
  "updated": "2026-07-12T11:33:15+07:00",
  "name": "allow-always-simple-home-user-projects-zync-is-tmp-wt-zync-os-mobile-t16-node-modules-pnpm-turbo-linux-64-2-10-2-node-modules-tu",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/home/user/Projects/zync.is/tmp/wt-zync-os-mobile--t16/node_modules/.pnpm/@turbo+linux-64@2.10.2/node_modules/@turbo/linux-64/bin/turbo",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}
### allow-always-simple-usr-bin-gh.json
{
  "created": "2026-07-12T11:16:24+07:00",
  "updated": "2026-07-12T11:16:24+07:00",
  "name": "allow-always-simple-usr-bin-gh",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/usr/bin/gh",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}
### allow-always-simple-usr-bin-node.json
{
  "created": "2026-07-12T11:25:34+07:00",
  "updated": "2026-07-12T11:25:34+07:00",
  "name": "allow-always-simple-usr-bin-node",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/usr/bin/node",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}
### allow-always-simple-usr-bin-ssh.json
{
  "created": "2026-07-12T11:25:22+07:00",
  "updated": "2026-07-12T11:25:22+07:00",
  "name": "allow-always-simple-usr-bin-ssh",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/usr/bin/ssh",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}
### allow-always-simple-usr-bin-telegram-desktop.json
{
  "created": "2026-07-12T11:37:35+07:00",
  "updated": "2026-07-12T11:37:35+07:00",
  "name": "allow-always-simple-usr-bin-telegram-desktop",
  "description": "",
  "action": "allow",
  "duration": "always",
  "operator": {
    "operand": "process.path",
    "data": "/usr/bin/telegram-desktop",
    "type": "simple",
    "list": [],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}