# One POSIX-extended regex per line, matched against the requested hostname.
# tinyproxy denies any host that matches nothing here.
# If a run fails to reach a model, check `docker compose exec egress-proxy cat
# /tmp/tinyproxy.log` from this directory for the DENY line and add the host below.
(^|\.)deepseek\.com$
(^|\.)z\.ai$
(^|\.)bigmodel\.cn$
(^|\.)moonshot\.cn$
# Kimi For Coding plan endpoint is api.kimi.com/coding/v1 — NOT a moonshot host.
(^|\.)kimi\.com$
(^|\.)moonshot\.ai$
(^|\.)models\.dev$
(^|\.)opencode\.ai$
# Gemini (google provider) -> generativelanguage.googleapis.com
(^|\.)googleapis\.com$
# Codex CLI: a ChatGPT sign-in talks to chatgpt.com, an API key to
# api.openai.com; token refresh goes to auth.openai.com.
(^|\.)chatgpt\.com$
(^|\.)openai\.com$