# Whitelist of allowed commands for ops-agent.
# Copy to /etc/ops-agent/commands.yml on the host.
# Restart ops-agent after changes.

commands:
  docker_ps:
    exec: "docker ps --format table"
    description: "List running Docker containers"

  git_status:
    exec: "git -C /srv/ops status --short"
    description: "Git status of the ops directory"

  systemctl_status:
    exec: "systemctl status"
    args_allowed: []
    description: "Show systemctl status (no args)"

  caddy_show_config:
    exec: "caddy fmt /etc/caddy/Caddyfile"
    description: "Print the formatted Caddy config"