# Domain Allowlists Configuration
# Configure domains that bypass scam/phishing detection

# Global allowlist - applies to all guilds
global_allowlist:
  - domain: "discord.com"
    reason: "Official Discord domain"
    added_by: "system"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "github.com"
    reason: "Popular code repository platform"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "youtube.com"
    reason: "Popular video platform"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "youtu.be"
    reason: "YouTube short links"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "imgur.com"
    reason: "Popular image hosting"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "reddit.com"
    reason: "Popular discussion platform"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"
    
  - domain: "wikipedia.org"
    reason: "Educational content"
    added_by: "admin"
    added_date: "2026-01-24T00:00:00Z"

# Guild-specific allowlists
# Use your Discord server ID as the key
guild_allowlists:
  123456789012345678:  # Replace with actual guild ID
    - domain: "example-gaming-site.com"
      reason: "Popular gaming community site"
      added_by: "guild_admin"
      added_date: "2026-01-24T00:00:00Z"
      
    - domain: "guild-specific-forum.com"
      reason: "Guild's official forum"
      added_by: "guild_owner"
      added_date: "2026-01-24T00:00:00Z"
      
  # Add more guild IDs as needed
  # 987654321098765432:
  #   - domain: "another-server-site.com"
  #     reason: "Server-specific trusted site"
  #     added_by: "admin"
  #     added_date: "2026-01-24T00:00:00Z"

# Configuration Notes:
#
# Domain Format:
#   - Use base domain only (e.g., "example.com" not "https://www.example.com/path")
#   - Subdomains are automatically included (allowing "example.com" also allows "www.example.com")
#   - Do not include protocols (http/https) or paths
#
# Why Allowlist Domains:
#   - Prevent false positives in scam detection
#   - Allow trusted community sites and resources
#   - Whitelist official platforms and services
#   - Support educational and reference materials
#
# Security Considerations:
#   - Only add domains you trust completely
#   - Regularly review and update the list
#   - Remove domains that become compromised
#   - Be cautious with URL shorteners
#
# Common Domains to Consider:
#   - Social platforms: twitter.com, instagram.com, tiktok.com
#   - Gaming: steam.com, epicgames.com, battle.net, minecraft.net
#   - Development: gitlab.com, stackoverflow.com, npm.org
#   - Media: twitch.tv, spotify.com, soundcloud.com
#   - Education: khan.org, coursera.org, edx.org
#   - News: bbc.com, reuters.com, apnews.com
#
# Guild-Specific vs Global:
#   - Global allowlist applies to all servers
#   - Guild-specific allowlists are additional (don't override global)
#   - Use guild-specific for community-specific trusted sites
#   - Use global for widely trusted platforms
#
# Maintenance:
#   - Review allowlist monthly for security
#   - Document reasons for all additions
#   - Track who added each domain for accountability
#   - Monitor for changes in domain ownership or compromise