diff --git a/.codex/config.toml b/.codex/config.toml
new file mode 100644
index 0000000..896e3b4
--- /dev/null
+++ b/.codex/config.toml
@@ -0,0 +1,10 @@
+model = "gpt-5.3-codex"
+model_reasoning_effort = "medium"
+
+approval_policy = "on-request"
+sandbox_mode = "read-only"
+allow_login_shell = false
+web_search = "cached"
+
+[features]
+use_linux_sandbox_bwrap = true
diff --git a/setup.sh b/setup.sh
index 2a9e5f1..f0213f7 100755
--- a/setup.sh
+++ b/setup.sh
@@ -77,6 +77,7 @@ SYMLINKS=(
 
 typeset -a COPIES
 COPIES=(
+    ".codex/config.toml"
     ".config/gtk-3.0"
     ".config/gtk-4.0"
     ".gtkrc-2.0"