diff --git a/opencode/.config/opencode/opencode.json b/opencode/.config/opencode/opencode.json
index 66c0de7..71e204f 100644
--- a/opencode/.config/opencode/opencode.json
+++ b/opencode/.config/opencode/opencode.json
@@ -7,5 +7,15 @@
       "command": ["npx", "@playwright/mcp@latest"],
       "enabled": true
     }
+  },
+  "permission": {
+    "bash": {
+      "*": "ask",
+      "kubectl *": "deny",
+      "kubectl get *": "allow",
+      "kubectl describe *": "allow",
+      "kubectl logs *": "allow",
+      "kubectl top *": "allow"
+    }
   }
 }
diff --git a/opencode/.config/opencode/service.json b/opencode/.config/opencode/service.json
new file mode 100644
index 0000000..d08c18d
--- /dev/null
+++ b/opencode/.config/opencode/service.json
@@ -0,0 +1,3 @@
+{
+  "password": "4QhoSb7noaFQU7oUWUB-HabVwNkYBtLjdwQsjJDEjHc"
+}
diff --git a/tmux/.tmux.conf b/tmux/.tmux.conf
index 947c7b5..ebffe40 100644
--- a/tmux/.tmux.conf
+++ b/tmux/.tmux.conf
@@ -1,5 +1,6 @@
 # set-option -g default-command "exec /usr/local/bin/bash --login"
 set-option -g status-style bg=default
+set-option -g status-position top
 
 # Enable mouse
 set -g mouse on