jeremy
de1d9e1d93
Replaces initial Nomad/Consul/Terraform skeleton with current Docker-based infrastructure across all three nodes (hf-pdocker-01, hf-pdocker-02, bart). Key changes: - CLAUDE.md: updated service distribution reflecting hf-pdocker-01 restored - docs/plans/2026-03-08-hf-pdocker-01-rebuild.md: new rebuild plan doc - compose/bart/: ai-agents, guacamole, matrix, media, openvas, smarthome, watchtower - compose/hf-pdocker-02/: traefik, monitoring, adguard, gitea, semaphore, wikijs, unifi, vaultwarden, actual-budget, mcpo, netclaw, trivy, watchtower, n8n - compose/hf-pdocker-01/: frigate, frigate-notify, farm-agent - stacks/: all Swarm stack definitions (monitoring, traefik, smarthome, matrix, guacamole, media, ai-agents, frigate, gitea, semaphore, wikijs, unifi, etc.) - .gitignore: exclude .env credential files and acme.json certs - .env.example: placeholder credential files for all services - .claude/agents/: gitea-backup and other infrastructure agent configs - scripts/: frigate media cleanup and NAS sync scripts Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
43 lines
2.6 KiB
JSON
43 lines
2.6 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- --timeout=10 http://matrix_synapse:8008/_matrix/client/versions 2>&1\")",
|
|
"Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- http://localhost:8080/api/http/routers | grep -A 20 ''mess@swarm'' | head -40\")",
|
|
"Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- http://localhost:8080/api/http/services | python3 -c \"\"import sys, json; data=json.load\\(sys.stdin\\); mess=[s for s in data if s.get\\(''name''\\)==''mess@swarm'']; print\\(json.dumps\\(mess, indent=2\\)\\)\"\"\")",
|
|
"Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.100 \"docker ps --filter name=matrix_synapse --format ''{{.ID}}'' | xargs -I {} docker inspect {} --format ''{{.Name}}: {{range .NetworkSettings.Networks}}{{.IPAddress}} {{end}}''\")",
|
|
"Bash(sshpass -p '&Rip8a115' ssh -o StrictHostKeyChecking=no glyptic@192.168.86.192 \"docker exec 2b1b52394e39 wget -qO- --timeout=10 http://10.0.3.149:8008/_matrix/client/versions 2>&1\")",
|
|
"Bash(sshpass:*)",
|
|
"Bash(curl:*)",
|
|
"Bash(python3:*)",
|
|
"Bash(nslookup:*)",
|
|
"Bash(host:*)",
|
|
"Bash(ssh:*)",
|
|
"Bash(ssh-keygen:*)",
|
|
"Bash(ping:*)",
|
|
"Bash(/mnt/c/Users/jeremy/projects/docker/stacks/wikijs/docker-compose.yml << 'EOF'\n\nnetworks:\n traefik-public:\n external: true\n wikijs-internal:\n driver: overlay\nEOF)",
|
|
"Bash(for ip in 192.168.86.{201..205})",
|
|
"Bash(do timeout 1 bash -c \"echo > /dev/tcp/$ip/22\")",
|
|
"Bash(echo:*)",
|
|
"Bash(done)",
|
|
"Bash(ssh-keyscan:*)",
|
|
"Bash(~/.ssh/known_hosts)",
|
|
"WebFetch(domain:wiki.hobbs.farm)",
|
|
"Bash(find:*)",
|
|
"WebSearch",
|
|
"WebFetch(domain:docs.gitea.com)",
|
|
"WebFetch(domain:docs.n8n.io)",
|
|
"WebFetch(domain:actualbudget.org)",
|
|
"WebFetch(domain:hub.docker.com)",
|
|
"WebFetch(domain:docs.semaphoreui.com)",
|
|
"WebFetch(domain:semaphoreui.com)",
|
|
"Bash(docker node ls:*)",
|
|
"Bash(docker stack:*)",
|
|
"Bash(docker info:*)",
|
|
"Bash(docker version:*)",
|
|
"Bash(/tmp/mcpo-config.json << 'EOF'\n{\n \"servers\": []\n}\nEOF)",
|
|
"Bash(/tmp/mcpo-config.json << 'EOF'\n{\n \"mcpServers\": {}\n}\nEOF)",
|
|
"Bash(/tmp/mcpo-config.json << 'EOF'\n{\n \"mcpServers\": {\n \"example\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@modelcontextprotocol/server-everything\"],\n \"env\": {}\n }\n }\n}\nEOF)"
|
|
]
|
|
}
|
|
}
|