ginnoirandClaude Sonnet 4.6
1bc648f33b
- Mount /config/maintainerr to /opt/data (actual DB location, not /opt/maintainerr/data) - Add NODE_TLS_REJECT_UNAUTHORIZED=0 so Node.js accepts Plex's self-signed cert - Mark TB-007/008/009/012/013/016 tasks as done/dropped in improvement plan Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
58 lines
1.3 KiB
Markdown
58 lines
1.3 KiB
Markdown
# TB-013 — Narrow code-server mount
|
|
|
|
**Status:** done
|
|
**Your call:** Do it
|
|
|
|
---
|
|
|
|
## Talk first
|
|
|
|
> **Stop.** Don't read Reference until we've talked.
|
|
> In chat, say **"let's do TB-013"** or **"narrow code-server mount"**.
|
|
|
|
**In one sentence:** Stop code-server from mounting your entire home directory.
|
|
|
|
**Why it came up:** code.ginnoir.com currently exposes /home/ginnoir — SSH keys, everything.
|
|
|
|
### Questions
|
|
|
|
1. What folders do you actually edit in code-server?
|
|
2. homelabstack + a projects dir enough?
|
|
|
|
### Your options
|
|
|
|
| Option | Meaning |
|
|
|--------|---------|
|
|
| **Do it** | We're doing this — I'll implement or walk you through it |
|
|
| **Later** | Keep on the list, not now |
|
|
| **Drop** | Remove from plan — totally fine |
|
|
| **Tweak** | Change scope; tell me how |
|
|
|
|
### What we decided
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Decision** | Done — scoped to /home/ginnoir/projects + .claude + .codex |
|
|
| **Notes** | LSIO abc user; dotfiles mount to /home/abc/.*; git credentials need one-time setup inside container |
|
|
| **Date** | 2026-06-15 |
|
|
|
|
---
|
|
|
|
<details>
|
|
<summary>Reference (only open if we're doing it)</summary>
|
|
|
|
### Stack / files
|
|
|
|
stacks/dev/docker-compose.yml
|
|
|
|
### If we do it — rough steps
|
|
|
|
1. Change mount to scoped path
|
|
2. Symlink homelabstack if needed
|
|
|
|
### Done when
|
|
|
|
- [ ] .ssh and unrelated home dirs not visible in IDE
|
|
|
|
</details>
|