Backtalk6858/claude-projects
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: Sprint Day 8 facts — Phase 2+3 complete, Coolify retired

Browse Source
This commit is contained in:
Backtalk6858
2026-06-24 21:54:05 -05:00
parent 4b99e9f884
commit 20f6e368b8
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agent-builder/.claude/context.md
+22
View File
@@ -382,5 +382,27 @@ Build, test, and push both builder agents to production. Work as long as it take
4. Shut down Coolify stack on server-01 4. Shut down Coolify stack on server-01
5. Verify all routes still live after Coolify gone 5. Verify all routes still live after Coolify gone
### 2026-06-24 Sprint Day 8 facts
- id=147 COMPLETE ✅ — Coolify fully retired on both servers
- coolify.yaml removed from /data/coolify/proxy/dynamic/ via sudo-bridge (new self-removing allowlist cleanup pattern)
- server-01 Coolify containers stopped: coolify-sentinel + coolify-proxy
- Gitea repo created: Backtalk6858/traefik (3 files pushed); boilerplates entry committed d2bbf8b
- All routes verified live post-shutdown
- id=141 COMPLETE ✅ — marked complete in DB
- Phase 2 Security Hardening COMPLETE ✅:
- id=142: bitwarden-bridge POST /items endpoint added (bw create template item → encode → create pattern)
- id=72: secrets-proxy bitwarden:// URI field selection (bitwarden://item#field); fixed bug — /items never returns password; now uses GET /secret?item=&field=
- id=140: zero-trust + security philosophy playbook written to memory (playbook_zero_trust_security.md)
- Phase 3 CI/CD: already complete (id=145 + id=141 done in prior days)
- end-of-session checklist: Obsidian step fixed in feedback_end_of_session_checklist.md (universal) + context-monitor.py time reminders (Logseq → Obsidian)
- Useful new pattern: self-removing sudo-bridge allowlist cleanup — write /tmp script, add tier-1 entry, execute (removes both entries), delete script
- Vault path for sudo-bridge API key: secret/data/sudo-bridge (field: first value, or api_key)
- Vault KV v2: always use secret/data/<path> not secret/<path>
- bitwarden-bridge GET /items: returns id/name/username/revisionDate ONLY — never password/notes; use GET /secret?item=&field= for field reads
- secrets-proxy restart pattern: Coolify injected env vars are lost on manual restart; use /tmp startup script that reads all secrets from Vault (scratchpad: start_secrets_proxy.py)
- NotebookLLM (companion for Obsidian): NOT YET SET UP — no record in DB or memory; needs to be planned
**Next session first task:** Hermes deployment (id=138) — grill-me pending, read reference_open_source_ai_tools.md first
## Update instructions ## Update instructions
Update at the end of every agent-builder session. Keep agent status, key decisions, and prereq checklist current. Update at the end of every agent-builder session. Keep agent status, key decisions, and prereq checklist current.