services/homelab
2
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity
449 Commits 1 Branch 0 Tags
8bcee5c17ff449d282a3449cf1814f383fa054e7
Commit Graph
3 Commits
Author SHA1 Message Date
ducoterra 8bcee5c17f document ops-user pi install and sudoers escalation policy 
Adds the sysadmin setup recipe to the pi notes: run pi as a dedicated `ops`
user with a tightly controlled sudoers allowlist instead of root, so an agent
can do host work without unbounded privilege.

Includes the AGENTS.md to drop at /home/ops/AGENTS.md. It records that the
allowlist is discovered with `sudo -l` (hostnamectl, reboot, the dnf and
systemctl subcommands, firewall-cmd, the ansible shim, libvirt/virsh and
composer-cli, getfacl/setfacl, osbuild-auto.sh, btrfs scrub) and sets the hard
rule for agents: when a command is not on that list, stop, do not attempt
escalation workarounds, and ask the human to add the exact full-path sudoers
line for review before proceeding.

LLM-Generated: true
 2026-10-17 12:26:40 -04:00
ducoterra 5e8524761b Add thinking level map to pi model definitions 
Documents the thinkingLevelMap for the juggernaut and turbo models in
the ~/.pi/agent/models.json example, and lowers maxTokens from 128000
to 32000 to match the working configuration.

LLM-Generated: true
 2026-10-03 22:03:52 -04:00
ducoterra dc108a791e Add devops days presentation, software_pi service, and update software_toolbx 
- Add presentations/devops_days_self_hosting_presentation.md
- Add active/software_pi/ service directory
- Update active/software_toolbx/Containerfile
- Update retired/kubernetes_userspace submodule

LLM-Generated: true
 2026-09-19 12:22:09 -04:00