ginnoirandClaude Sonnet 4.6
1bc648f33b
- Mount /config/maintainerr to /opt/data (actual DB location, not /opt/maintainerr/data) - Add NODE_TLS_REJECT_UNAUTHORIZED=0 so Node.js accepts Plex's self-signed cert - Mark TB-007/008/009/012/013/016 tasks as done/dropped in improvement plan Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1.3 KiB
1.3 KiB
TB-013 — Narrow code-server mount
Status: done
Your call: Do it
Talk first
Stop. Don't read Reference until we've talked. In chat, say "let's do TB-013" or "narrow code-server mount".
In one sentence: Stop code-server from mounting your entire home directory.
Why it came up: code.ginnoir.com currently exposes /home/ginnoir — SSH keys, everything.
Questions
- What folders do you actually edit in code-server?
- homelabstack + a projects dir enough?
Your options
| Option | Meaning |
|---|---|
| Do it | We're doing this — I'll implement or walk you through it |
| Later | Keep on the list, not now |
| Drop | Remove from plan — totally fine |
| Tweak | Change scope; tell me how |
What we decided
| Decision | Done — scoped to /home/ginnoir/projects + .claude + .codex |
| Notes | LSIO abc user; dotfiles mount to /home/abc/.*; git credentials need one-time setup inside container |
| Date | 2026-06-15 |
Reference (only open if we're doing it)
Stack / files
stacks/dev/docker-compose.yml
If we do it — rough steps
- Change mount to scoped path
- Symlink homelabstack if needed
Done when
- .ssh and unrelated home dirs not visible in IDE