dan/ops-jrz1
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity
58 commits 3 branches 1 tag 5.5 MiB
Commit graph

19 commits

Author SHA1 Message Date
Dan 5c4b2aac84 Add egress logging and rate limiting 
- Log all new outbound connections from users (EGRESS: prefix)
- Rate limit: 30/min sustained, burst 60
- Over-limit connections logged (EGRESS-LIMIT:) and rejected
- Closes ops-jrz1-p2d, ops-jrz1-cmv

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 21:12:18 -08:00
Dan 9083f06669 Sync beads 2026-01-02 21:03:39 -08:00
Dan 89f2987f1e Add cgroups limits and CPU watchdog 
- User slice: MemoryMax 80%, TasksMax 500, CPUWeight 100
- CPU watchdog: detects sustained abuse (>180% for 5 min), kills user
- Fixed scripts for NixOS (shebang, PATH)
- Closes ops-jrz1-8m7, ops-jrz1-1bk

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 21:02:18 -08:00
Dan 9c3ebaf9f9 Sync beads 2026-01-02 20:26:58 -08:00
Dan 8e266b5e82 Add killswitch script for emergency user termination 
- Kills all processes for a user
- Terminates login session
- Logs to syslog with reason
- Refuses to kill system users (uid < 1000)
- Closes ops-jrz1-396

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 20:23:31 -08:00
Dan 8c1d1ad49e Sync beads 2026-01-02 19:51:33 -08:00
Dan 3b91f37975 Add security posture analysis and fix home dir permissions 
- docs/security-posture.md: Threat model, risk assessment, recommendations
- Make home directories private (chmod 700)
- Update learner-add.sh to create private homes
- Closes ops-jrz1-k2a

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 19:14:07 -08:00
Dan 1b1a91f9cb Switch to user-managed npm for AI coding tools 
- Remove manual /usr/local/bin/claude install
- Remove claude symlink setup from learner-add.sh
- Update onboarding docs with npm install instructions
- Users choose their AI coder: claude, opencode, gemini, codex

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 19:03:35 -08:00
Dan 21d3038aca Add opencode and nodejs to system packages 
- opencode (v1.0.224) via flake input from github:sst/opencode
- nodejs_22 for npm-based AI tools (gemini-cli, codex)
- Closes ops-jrz1-ecw

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 17:41:48 -08:00
Dan 0ce7bc73d9 Add tmux and beads to system packages 
- tmux for session persistence
- beads (bd CLI) via flake input from github:steveyegge/beads
- Closes ops-jrz1-d38, ops-jrz1-jvt

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-02 17:26:11 -08:00
Dan 89cedfb4c6 Clean up: update tests for claude, remove dead maubot code 2026-01-02 16:46:11 -08:00
Dan 498f5279c4 Remove maubot plugin setup from user creation (Direct Slack path) 2026-01-02 15:14:13 -08:00
Dan 33db9417ca Sync beads 2026-01-02 12:35:11 -08:00
Dan f6540cfbd5 Add direnv to system packages for per-project devshells 2026-01-02 12:32:32 -08:00
Dan 21c356979e Enable nix-ld for VS Code Remote-SSH 2026-01-02 10:22:07 -08:00
Dan 1ca39f2923 Add direct Slack path epic (ops-jrz1-2bu) 2025-12-29 18:57:08 -05:00
Dan 3d33a45cc9 Add learner dev environment, testing infrastructure, and skills 
Learner account management:
- learner-add.sh: create accounts with SSH, plugin skeleton
- learner-remove.sh: remove accounts with optional archive
- plugin-skeleton template: starter maubot plugin

Testing:
- flake.nix: add checks output for pre-deploy validation
- smoke-test.sh: post-deploy service verification

Documentation:
- learner-onboarding.md: VS Code Remote-SSH setup guide
- learner-admin.md: account management procedures

Skills:
- code-review.md: multi-lens code review skill
- orch, worklog: symlinks to shared skills
 2025-12-28 22:23:06 -05:00
Dan abe2adfead refactor: standardize agent instruction files 
- AGENTS.md: Consolidated source of truth (159 lines)
- CLAUDE.md: Thin wrapper (@AGENTS.md import)
- GEMINI.md: New, with skills pointer for Gemini CLI

Previously CLAUDE.md had 477 lines duplicating/extending AGENTS.md content.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-23 01:12:27 -05:00
Dan 8826d62bcc Add maubot integration and infrastructure updates 
- maubot.nix: Declarative bot framework with plugin deployment
- backup.nix: Local backup service for Matrix/bridge data
- sna-instagram-bot: Instagram content bridge plugin
- beads: Issue tracking workflow integrated
- spec 004: Browser-based dev environment design
- nixpkgs bump: Oct 22 → Dec 2
- Fix maubot health check (401 = healthy)
 2025-12-08 15:55:12 -08:00