User on Alwaldend

Users

Mon, 01 Jan 0001 00:00:00 +0000

This tree contains user-specific code and infrastructure. Tracked source follows the repository’s public-source policy. Personal information and secrets must not be tracked or disclosed. Non-secret, non-personal operational facts remain public even when they describe generated or live state.

Requirements

Bazel targets MUST use repository-internal visibility.
User artifacts MUST NOT be published.
User targets MUST NOT be dependencies of production build targets.

Ansible

Mon, 01 Jan 0001 00:00:00 +0000

Ansible

Mon, 01 Jan 0001 00:00:00 +0000

Host Bot

Mon, 01 Jan 0001 00:00:00 +0000

Host Bot runs Traefik with mTLS in front of T3 Code. The host firewall blocks direct external access to T3 Code and accepts new connections only on SSH, HTTP, and HTTPS ports.

T3 Code controls permissions per thread. Its Auto mode maps to Codex Auto-review. The managed Codex requirements allow read-only and host-bot permissions with on-request approvals, so threads cannot select Full access or disable approvals. The requirements file only allowlists the host-bot profile; it must not define the profile because T3 Code supplies a per-thread config layer with the same name, and Codex rejects profiles defined by both requirements and config. The normal and isolated provider configs define host-bot with workspace writes, public command-network access, and write access to the Bazel cache and Bazelisk directories while keeping local network binding and loopback connections available for Bazel servers. Other private network targets remain blocked. T3 Code must select that profile for the thread. Hosted web search is not restricted by this role.

simeonwarren

Mon, 01 Jan 0001 00:00:00 +0000

Generate a client cert

bazel run //users/simeonwarren:gen_client_cert -- --host phone1 --ttl "180d" --output_dir "${PWD}/certs"

Run opencode

bazel run //users/simeonwarren:opencode -- "${PWD}"

Apply terraform

bazel run //users/simeonwarren/tf:tf.apply

Prepare opencode

ln -s "${PWD}/users/simeonwarren/opencode.json" ~/.config/opencode/opencode.json
ln -s "${PWD}/users/simeonwarren/tui.json" ~/.config/opencode/tui.json

Tf

Mon, 01 Jan 0001 00:00:00 +0000