config-sample.md +18 −6
42# Default OSS provider for --oss sessions. When unset, Codex prompts. Default: unset.42# Default OSS provider for --oss sessions. When unset, Codex prompts. Default: unset.
43# oss_provider = "ollama"43# oss_provider = "ollama"
44 44
4545# Preferred service tier. `fast` is honored only when enabled in [features].# Preferred service tier. Built-in examples: fast | flex; model catalogs can add more.
4646# service_tier = "flex" # fast | flex# service_tier = "flex"
47 47
48# Optional manual model metadata. When unset, Codex uses model or preset defaults.48# Optional manual model metadata. When unset, Codex uses model or preset defaults.
49# model_context_window = 128000 # tokens; default: auto for model49# model_context_window = 128000 # tokens; default: auto for model
288experimental_use_profile = false288experimental_use_profile = false
289 289
290################################################################################290################################################################################
291291# Managed network proxy settings# Sandboxed networking settings
292################################################################################292################################################################################
293 293
294# Enable the feature before configuring sandboxed networking rules.
295# [features.network_proxy]
296# enabled = true
297# domains = { "api.openai.com" = "allow", "example.com" = "deny" }
298#
299# Exact hosts match only themselves.
300# "*.example.com" matches subdomains only; "**.example.com" matches the apex plus subdomains.
301# "*" allows any public host that is not denied, so prefer scoped rules when possible.
302# `allow_local_binding = false` blocks loopback and private destinations by default.
303# Add an exact local IP literal or `localhost` allow rule for one target, or set it to true only when broader local access is required.
304#
294# Set `default_permissions = "workspace"` before enabling this profile.305# Set `default_permissions = "workspace"` before enabling this profile.
295# [permissions.workspace.network]306# [permissions.workspace.network]
296# enabled = true307# enabled = true
303# dangerously_allow_non_loopback_proxy = false314# dangerously_allow_non_loopback_proxy = false
304# dangerously_allow_non_loopback_admin = false315# dangerously_allow_non_loopback_admin = false
305# dangerously_allow_all_unix_sockets = false316# dangerously_allow_all_unix_sockets = false
306# mode = "limited" # limited | full
307# allow_local_binding = false317# allow_local_binding = false
308#318#
309# [permissions.workspace.network.domains]319# [permissions.workspace.network.domains]
400# Leave this table empty to accept defaults. Set explicit booleans to opt in/out.410# Leave this table empty to accept defaults. Set explicit booleans to opt in/out.
401# shell_tool = true411# shell_tool = true
402# apps = false412# apps = false
413# hooks = false
414# plugin_hooks = false # Default off; set true to opt into plugin-bundled hooks.
403# codex_git_commit = false415# codex_git_commit = false
404# codex_hooks = false
405# unified_exec = true416# unified_exec = true
406# shell_snapshot = true417# shell_snapshot = true
407# multi_agent = true418# multi_agent = true
408# personality = true419# personality = true
420# network_proxy = false
409# fast_mode = true421# fast_mode = true
410# enable_request_compression = true422# enable_request_compression = true
411# skill_mcp_dependency_install = true423# skill_mcp_dependency_install = true
580# model_provider = "openai"592# model_provider = "openai"
581# approval_policy = "on-request"593# approval_policy = "on-request"
582# sandbox_mode = "read-only"594# sandbox_mode = "read-only"
583595# service_tier = "flex"# service_tier = "flex" # or another supported service tier id
584# oss_provider = "ollama"596# oss_provider = "ollama"
585# model_reasoning_effort = "medium"597# model_reasoning_effort = "medium"
586# plan_mode_reasoning_effort = "high"598# plan_mode_reasoning_effort = "high"