We're considering ways that IT departments can more confidently deploy Obsidian to employees and students. What do you think about this approach? 1. New policy.json file with options for disabling community plugins, themes, Sync, Publish 2. Command line options for --policy-file "path/to/policy.json" 3. Command line options for --policy-json "{json contents}" 4. Environment variable for OBSIDIAN_POLICY_FILE and OBSIDIAN_POLICY_JSON same as the command line options
How to enforce the policy if it's specified on command line / env. ? Perhaps better if the file is found in a predictable path that cannot be tampered with ?
Considering some plugins could be useful for businesses, how about an option to point to different source for the plugin list, instead of the Obsidian releases GitHub repository? That way businesses could define a subset of the plugin list that they have vetted for use in the business. It would also allow businesses to have internal repositories with plugins, so they can still be used in air-gapped environments.
Having a policy file, plus the choice to use it through command-line or environment variables, gives IT teams flexibility. They can lock down plugins, themes, Sync, or Publish depending on what’s allowed, while still keeping the deployment process straightforward.
Good Idea, I think the community plugins are some of the greatest reservations against Obsidian in business environments. Thanks for your work, I really appreciate obsidian.
It's "OK", although I personally dislike this JS/TS approach of every tools has its own config.json file. Small suggestion tho, I would not name it "--policy-json" as the file can/will be json can lead to confusion. maybe just --policy?
Based on what I know this is good. I should remain as simple as possible to keep Obsidian accessible to as many people as possible.
Technical Operations Manager at One Net Group
2moA json file in a system protected path (where the user cannot change) is perfect. I would like to see different levels (enforce, recommend). Finally, some plugins are really useful for office work, so I would like to have lists of allowed/blocked plugins.