From 2a404e685b02b78f0d273bc022f8162f2159ac28 Mon Sep 17 00:00:00 2001
From: NotAShelf <raf@notashelf.dev>
Date: Mon, 16 Feb 2026 00:04:42 +0300
Subject: [PATCH] nix: allow `file://` and other insecure schemes in VM tests

Signed-off-by: NotAShelf <raf@notashelf.dev>
Change-Id: I8ad4f8e9cf0990a036cff252d8dd38f96a6a6964
---
 nix/vm-common.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nix/vm-common.nix b/nix/vm-common.nix
index 1fa3640..0965e2b 100644
--- a/nix/vm-common.nix
+++ b/nix/vm-common.nix
@@ -62,6 +62,8 @@ in {
           host = "127.0.0.1";
           port = 3000;
           cors_permissive = false;
+          # Allow file:// URLs in VM tests (no network, repos are local)
+          allowed_url_schemes = ["https" "http" "git" "ssh" "file"];
         };
 
         gc.enabled = false;