# Allowed outbound domains -- one per line, comments start with #.
# The firewall resolves these to IPs at container start and blocks everything else.

# Claude API
api.anthropic.com
statsig.anthropic.com
sentry.io

# Claude Code distribution (always GitHub, regardless of project forge)
github.com
api.github.com

# NPM registry (Claude Code installs MCP servers via npm)
registry.npmjs.org

# Rust package registry
crates.io
static.crates.io
index.crates.io

# Project forge
gitlab.com
