diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..cdd16c7
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,20 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(find /home/chris/devel/git/git.oopen.de/ansible -path \"*/ipt-server/defaults*\" 2>/dev/null)",
+      "Read(//home/chris/devel/git/git.oopen.de/ansible/**)",
+      "Bash(grep -n \"jitsi\" /home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/cl-01.oopen.de/ipt-server.yml)",
+      "Read(//home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/cl-01.oopen.de/**)",
+      "Bash(grep -n \"jitsi\" /home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/test.mx.oopen.de/ipt-server.yml)",
+      "Read(//home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/test.mx.oopen.de/**)",
+      "Bash(grep -rn \"jitsi\" /home/chris/devel/git/git.oopen.de/ansible/oopen-server/roles/ipt-server/defaults/main.yml)",
+      "Read(//home/chris/devel/git/git.oopen.de/ansible/oopen-server/roles/ipt-server/defaults/**)",
+      "Bash(grep -rn \"fw_jitsi_tcp_ports_out\\\\|fw_jitsi_udp_ports_out\" /home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/)",
+      "Read(//home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/**)"
+    ],
+    "additionalDirectories": [
+      "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/cl-01.oopen.de",
+      "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/host_vars/test.mx.oopen.de"
+    ]
+  }
+}