infra: full IaC state after hf-pdocker-01 rebuild (2026-03-08)

Replaces initial Nomad/Consul/Terraform skeleton with current Docker-based infrastructure across all three nodes (hf-pdocker-01, hf-pdocker-02, bart). Key changes: - CLAUDE.md: updated service distribution reflecting hf-pdocker-01 restored - docs/plans/2026-03-08-hf-pdocker-01-rebuild.md: new rebuild plan doc - compose/bart/: ai-agents, guacamole, matrix, media, openvas, smarthome, watchtower - compose/hf-pdocker-02/: traefik, monitoring, adguard, gitea, semaphore, wikijs, unifi, vaultwarden, actual-budget, mcpo, netclaw, trivy, watchtower, n8n - compose/hf-pdocker-01/: frigate, frigate-notify, farm-agent - stacks/: all Swarm stack definitions (monitoring, traefik, smarthome, matrix, guacamole, media, ai-agents, frigate, gitea, semaphore, wikijs, unifi, etc.) - .gitignore: exclude .env credential files and acme.json certs - .env.example: placeholder credential files for all services - .claude/agents/: gitea-backup and other infrastructure agent configs - scripts/: frigate media cleanup and NAS sync scripts Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-08 18:51:25 -05:00
parent b1d111a011
commit de1d9e1d93
102 changed files with 12634 additions and 3 deletions
@@ -0,0 +1,42 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- --timeout=10 http://matrix_synapse:8008/_matrix/client/versions 2>&1\")",
+      "Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- http://localhost:8080/api/http/routers | grep -A 20 ''mess@swarm'' | head -40\")",
+      "Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- http://localhost:8080/api/http/services | python3 -c \"\"import sys, json; data=json.load\\(sys.stdin\\); mess=[s for s in data if s.get\\(''name''\\)==''mess@swarm'']; print\\(json.dumps\\(mess, indent=2\\)\\)\"\"\")",
+      "Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.100 \"docker ps --filter name=matrix_synapse --format ''{{.ID}}'' | xargs -I {} docker inspect {} --format ''{{.Name}}: {{range .NetworkSettings.Networks}}{{.IPAddress}} {{end}}''\")",
+      "Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- --timeout=10 http://10.0.3.149:8008/_matrix/client/versions 2>&1\")",
+      "Bash(sshpass:*)",
+      "Bash(curl:*)",
+      "Bash(python3:*)",
+      "Bash(nslookup:*)",
+      "Bash(host:*)",
+      "Bash(ssh:*)",
+      "Bash(ssh-keygen:*)",
+      "Bash(ping:*)",
+      "Bash(/mnt/c/Users/jeremy/projects/docker/stacks/wikijs/docker-compose.yml << 'EOF'\n\nnetworks:\n  traefik-public:\n    external: true\n  wikijs-internal:\n    driver: overlay\nEOF)",
+      "Bash(for ip in 192.168.86.{201..205})",
+      "Bash(do timeout 1 bash -c \"echo > /dev/tcp/$ip/22\")",
+      "Bash(echo:*)",
+      "Bash(done)",
+      "Bash(ssh-keyscan:*)",
+      "Bash(~/.ssh/known_hosts)",
+      "WebFetch(domain:wiki.hobbs.farm)",
+      "Bash(find:*)",
+      "WebSearch",
+      "WebFetch(domain:docs.gitea.com)",
+      "WebFetch(domain:docs.n8n.io)",
+      "WebFetch(domain:actualbudget.org)",
+      "WebFetch(domain:hub.docker.com)",
+      "WebFetch(domain:docs.semaphoreui.com)",
+      "WebFetch(domain:semaphoreui.com)",
+      "Bash(docker node ls:*)",
+      "Bash(docker stack:*)",
+      "Bash(docker info:*)",
+      "Bash(docker version:*)",
+      "Bash(/tmp/mcpo-config.json << 'EOF'\n{\n  \"servers\": []\n}\nEOF)",
+      "Bash(/tmp/mcpo-config.json << 'EOF'\n{\n  \"mcpServers\": {}\n}\nEOF)",
+      "Bash(/tmp/mcpo-config.json << 'EOF'\n{\n  \"mcpServers\": {\n    \"example\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@modelcontextprotocol/server-everything\"],\n      \"env\": {}\n    }\n  }\n}\nEOF)"
+    ]
+  }
+}