# TB-013 — Narrow code-server mount

**Status:** done  
**Your call:** Do it

---

## Talk first

> **Stop.** Don't read Reference until we've talked.
> In chat, say **"let's do TB-013"** or **"narrow code-server mount"**.

**In one sentence:** Stop code-server from mounting your entire home directory.

**Why it came up:** code.ginnoir.com currently exposes /home/ginnoir — SSH keys, everything.

### Questions

1. What folders do you actually edit in code-server?
2. homelabstack + a projects dir enough?

### Your options

| Option | Meaning |
|--------|---------|
| **Do it** | We're doing this — I'll implement or walk you through it |
| **Later** | Keep on the list, not now |
| **Drop** | Remove from plan — totally fine |
| **Tweak** | Change scope; tell me how |

### What we decided

| | |
|---|---|
| **Decision** | Done — scoped to /home/ginnoir/projects + .claude + .codex |
| **Notes** | LSIO abc user; dotfiles mount to /home/abc/.*; git credentials need one-time setup inside container |
| **Date** | 2026-06-15 |

---

<details>
<summary>Reference (only open if we're doing it)</summary>

### Stack / files

stacks/dev/docker-compose.yml

### If we do it — rough steps

1. Change mount to scoped path
2. Symlink homelabstack if needed

### Done when

- [ ] .ssh and unrelated home dirs not visible in IDE

</details>