diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
index d56dc5b..56a8e0d 100644
--- a/.config/opencode/opencode.jsonc
+++ b/.config/opencode/opencode.jsonc
@@ -73,6 +73,17 @@
       "docker ps *": "allow",
       "docker logs *": "allow",
       "docker compose logs *": "allow",
+      "docker manifest inspect": "allow",
+      // Ansible
+      "ansible-playbook --version": "allow",
+      "ansible-playbook --syntax-check *": "allow",
+      "ansible-lint --version": "allow",
+      // OpenTofu
+      "tofu version": "allow",
+      "tofu init -backend=false": "allow",
+      "tofu validate *": "allow",
+      "tofu fmt -check *": "allow",
+      "tofu plan *": "allow",
     },
     "read": {
       "/tmp/opencode": "allow",
@@ -213,7 +224,7 @@
   },
   "lsp": true,
   "formatter": true,
-  "model": "openai/gpt-5.6-terra",
+  "model": "openai/gpt-5.6-sol",
   "small_model": "openai/gpt-5.6-luna",
   "agent": {
     "explore": {