## Egress allowlist — one extended regex per line, matched against the
## destination host of every CONNECT / GET / POST that comes through
## tinyproxy. `FilterDefaultDeny Yes` means anything not matched is dropped.
##
## Add new entries here when a new upstream needs to be reached. Keep the
## list audited — every line widens the prod-test stack's blast radius.

^elevaseo\.com$
^.+\.elevaseo\.com$