docker-claude/claude/settings.json

{
  "availableModels": ["sonnet", "opus", "haiku"],
  "permissions": {
    "allow": ["Bash(*)", "Edit(*)", "Write(*)"],
    "deny": ["Bash(curl *)", "Read(.*env*)"],
    "env": {
      "CLAUDE_CODE_ENABLE_TELEMETRY": "0"
    }
  }
}
feat(policy): restrict available models to sonnet, opus, haiku Add /etc/claude-code/managed-settings.json with availableModels set to the three Anthropic model families. The file is root-owned inside the container so the node user cannot modify it. Managed settings cannot be bypassed via --model flag, /model command, or ANTHROPIC_MODEL env var. 2026-04-14 22:55:02 +02:00			`{`
feat(policy): allow bash and file modification tools without prompting Add permissions.allow to managed-settings.json for Bash(), Edit(), and Write(*). Claude Code will not prompt for confirmation on shell commands or file writes inside the container. 2026-04-14 22:57:29 +02:00			`"availableModels": ["sonnet", "opus", "haiku"],`
			`"permissions": {`
feat(mcp): add GitHub, GitLab, Jira, and Confluence MCP servers Install four MCP servers globally in the claude image: @modelcontextprotocol/server-github → mcp-server-github @yoda.digital/gitlab-mcp-server → gitlab-mcp-server @aashari/mcp-server-atlassian-jira → mcp-atlassian-jira @aashari/mcp-server-atlassian-confluence → mcp-atlassian-confluence Wire them in managed-settings.json via mcpServers with env var pass-through. Jira and Confluence share ATLASSIAN_* credentials. Add api.github.com, .gitlab.com, .atlassian.net to the squid allowlist. All credentials are optional — servers are skipped if the relevant env vars are unset. 2026-04-14 23:09:42 +02:00			`"allow": ["Bash()", "Edit()", "Write(*)"],`
			`"deny": ["Bash(curl )", "Read(.env*)"],`
			`"env": {`
			`"CLAUDE_CODE_ENABLE_TELEMETRY": "0"`
			`}`
feat(policy): allow bash and file modification tools without prompting Add permissions.allow to managed-settings.json for Bash(), Edit(), and Write(*). Claude Code will not prompt for confirmation on shell commands or file writes inside the container. 2026-04-14 22:57:29 +02:00			`}`
feat(policy): restrict available models to sonnet, opus, haiku Add /etc/claude-code/managed-settings.json with availableModels set to the three Anthropic model families. The file is root-owned inside the container so the node user cannot modify it. Managed settings cannot be bypassed via --model flag, /model command, or ANTHROPIC_MODEL env var. 2026-04-14 22:55:02 +02:00			`}`