# Lazaret trusted-host configuration v1

schema = "lazaret-trusted-host-config-v1"

[storage]
data_root = "~/.local/share/lazaret"

[network]
default_allow = ["192.0.2.53/32", "198.51.100.53/32"]

[profiles.default]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root"]
allow_egress = ["203.0.113.10/32"]
volumes = [
    { host = "{profile_dir}/agent-state", container = "/root/.local/state/agent", kind = "directory", access = "read-write", create = true },
]

[profiles.default.escalation]
enabled = false