CloudHost/agent-skills
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add phreak to server fleet map, note pinky's ArchiveBox+trawl

Browse Source 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Malin
2026-08-17 13:41:04 +02:00
co-authored by Claude Sonnet 5
parent 251498ad58
commit 6e44673792
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/server-fleet-map/SKILL.md
+2 -1
View File
@@ -19,7 +19,8 @@ whichever host you happen to already be connected to.
| **gringo** | `100.95.46.79` (LAN `192.168.168.68`) | Internal apps/tools host — replacement for the old Linux Docker host barky-1 | ~45 Bastille VNET jails on `10.20.0.0/24` (APIs, dashboards, Gitea, analytics, productivity tools). Default-deny outbound pf model; NPM dedicated ports `8000 + last octet`. See `docs/server-gringo.md`. |
| **zamolxis** | `100.115.128.41` | Standalone (non-jailed) FreeBSD site host | Not part of the granja/external-fleet jail families — a single site (Newspaper/tagDiv theme, PHP 8.5) running directly on the host, not in a jail. |
| **cabrera** | `100.100.108.19`, SSH port `79` | External Linux affiliate-network host (BTPanel-style) | Part of the older Linux fleet (alongside raptor/maagar/formentor/moonie/spunky/proton/shoe — several since decommissioned/migrated to funky). Hosts easycut.es's main WooCommerce e-commerce site directly (not jailed). |
| **pinky** | `100.78.228.127` (`pinky.taild32c88.ts.net`) | Linux/Docker-only workloads — genuine Docker containers, or a Linux-only build toolchain (the **Android SDK + emulator** for Capacitor APK builds, e.g. Bauxa) | Not part of the FreeBSD/Bastille fleet above, but **same access pattern** — `root@`, standard key, no gotcha. (A 2026-08-13 session wrongly logged this host as SSH-blocked after only testing `malin@`; `root@` works fine, same as every other host here.) Gentoo Linux, 8vCPU/15GB RAM. Android SDK lives at `/opt/build-tools/android-sdk` on the host; host has **no JDK**, so APK compiles run inside a throwaway Docker container with the SDK + `/root/.gradle` bind-mounted in — no committed script for this yet, worth writing one before the next build. A long-lived `pesiq-android-emulator` container (`budtmo/docker-android`, Android 14) is available for install/functional testing via ADB (`:5556`) or noVNC (`:6081`) — usable for any project's APK, not just PesIQ. Don't default work here just because it's Linux-flavored — see "How to decide" below; this host is for genuinely Docker/Linux-specific needs only. Full detail: `docs/server-pinky.md` in granja. |
| **pinky** | `100.78.228.127` (`pinky.taild32c88.ts.net`) | Linux/Docker-only workloads — genuine Docker containers, or a Linux-only build toolchain (the **Android SDK + emulator** for Capacitor APK builds, e.g. Bauxa) | Not part of the FreeBSD/Bastille fleet above, but **same access pattern** — `root@`, standard key, no gotcha. (A 2026-08-13 session wrongly logged this host as SSH-blocked after only testing `malin@`; `root@` works fine, same as every other host here.) Gentoo Linux, 8vCPU/15GB RAM. Android SDK lives at `/opt/build-tools/android-sdk` on the host; host has **no JDK**, so APK compiles run inside a throwaway Docker container with the SDK + `/root/.gradle` bind-mounted in — no committed script for this yet, worth writing one before the next build. A long-lived `pesiq-android-emulator` container (`budtmo/docker-android`, Android 14) is available for install/functional testing via ADB (`:5556`) or noVNC (`:6081`) — usable for any project's APK, not just PesIQ. Also runs ArchiveBox + trawl (self-hosted anti-bot scraping engine) for web archiving — see `docs/server-pinky.md`. Don't default work here just because it's Linux-flavored — see "How to decide" below; this host is for genuinely Docker/Linux-specific needs only. Full detail: `docs/server-pinky.md` in granja. |
| **phreak** | `100.76.207.107` | Second Bastille app host — SaaS products deliberately given their own dedicated host instead of joining gringo's shared jail fleet (Bauxa, Fleet Admin, Tracelead) | FreeBSD 15.1, only 3 jails as of 2026-08-17 (`bauxa`, `fleet-admin`, `tracelead`). **Connect by Tailscale IP, not the `phreak` hostname** — bare-hostname SSH fails host-key verification. **No pf default-deny-outbound configured** — unlike gringo, a real gap not a documented exception. Bauxa and Fleet Admin also still run in parallel on gringo (duplicate deployments, not yet reconciled — check both before assuming either is authoritative). Full detail: `docs/server-phreak.md` in granja. |
## How to decide where new work belongs