bolbol/nas-runbooks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
302 Commits 1 Branch 0 Tags
ac2a1b641ea94ceb26f199484746409bbef4c287
Commit Graph
164 Commits
Author SHA1 Message Date
bolbolandClaude Opus 4.8 ac2a1b641e secrets(rotation): B5 -- mot de passe legacy famille 2L2u519w* largement embarque (empreinte, pas de valeur) 
Ajout B5 a common/rotation-secrets-inventaire.md, redige selon la doctrine A1 (empreinte
sha256:bbd43b3e, valeur JAMAIS en clair). Sweep unique grep -rlI sur /volume1/docker (08/08/2026)
= ~30 fichiers : ~10 remotes git (.git/config), 7 .env desactives/backups, et DEJA en clair dans le
repo nas-runbooks lui-meme (HEBERGEMENT-SITES-STATIQUES.md, n8n-skills-officiels.md,
tap-gitea-hermes-skills.md, telegram-flood-control-...gitea-deploy-token.md) + context-hub/MEMORY/log.
Liveness NON re-verifiee (172.17.0.1 injoignable hors NAS, test Tailscale non concluant) -> traiter
comme potentiellement vivant. Remediation (rotation + reecriture remotes + scrub historique) = session
dediee, hors perimetre du chantier message_id.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-08 13:14:27 +01:00
bolbolandClaude Opus 4.8 c3a74b565d docs(hermes-tt): runbook elem_id OWA volatile (piste message_id natif fermee) + PROTOCOL-INFRA 
- hermes-tt/nyora-notes-tt-message-id-elem-id-volatile-08-08-2026.md : cycle complet --
  hypothese elem_id stable, test insuffisant (1 msg position 0, appels rapproches) qui l'a
  faussement valide, test rigoureux (19 msg, ensembles disjoints, 0/20 meme index) qui
  l'infirme, cause (id de rendu DOM volatile), decision (message_id reste hash SHA256 stable,
  conservation conversation_id data-convid niveau thread + fix retry /search count:0), garde-fou
  dedup (399 notes en dossiers 'done' jamais re-scannes -> pas de doublon).
- PROTOCOL-INFRA.md : regle "id DOM d'un SPA jamais presume stable" (tester >=2 rendus reels +
  plusieurs echantillons) + fix /search count:0 transitoire + piege split('|') sur attrs.
- _INDEX.md : entree ajoutee.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-08 12:10:03 +01:00
bolbol 50a1de04e3 protocol: ajout tactique checklist-projet (suivi operations validees, economie tokens) 2026-08-08 07:51:57 +00:00
bolbol a14bcc636e runbook : rotation cles Google Bifrost bloquee par max_retries=0 2026-08-05 17:00:24 +00:00
bolbol 5651733a66 runbook: piege ps-aux host vs namespace PID container (mcp-nas) 2026-08-04 21:29:00 +00:00
hermes-tt 16114e134c protocol-infra: fix cron n8n orphelin cause instabilite hermes-mail-browser 2026-08-02 17:00:39 +00:00
hermes-tt 31b98fcbc9 protocol-infra: fix nyora-notes-tt disk I/O error post-backup (moteur sqlite mixte) 2026-08-02 14:51:39 +00:00
bolbol 70e5d99432 deploy: extension i-have-adhd vers hermes-nabil (VPS) 2026-07-31 19:06:15 +00:00
bolbol 19be86eaca deploy: runbook adoption skill i-have-adhd (3 instances) 2026-07-31 18:49:39 +00:00
bolbol a684884d05 pivot: Reddit abandonne (Responsible Builder Policy), commentaires YouTube branches dans le vrai pipeline 2026-07-31 10:11:42 +00:00
bolbol 3f0edf1122 correction: le vrai pipeline est le cron hermes-nyora, pas le workflow n8n 2026-07-31 08:21:31 +00:00
bolbol 919f94fe7b runbook: veille Dr Nexum - sources Reddit + pipeline retrouve inactif (403 IP NAS, perimetre Nyora) 2026-07-31 08:08:30 +00:00
bolbol 728512af95 runbook: context-hub MCP initialize Bad Request, 4 causes empilees, resolu (30/07/2026) 2026-07-30 21:36:29 +00:00
bolbol 6ea7cbb3ab runbook: onboarding HERMES_NABIL (context-hub pret, cote VPS bloque) 2026-07-30 15:46:26 +00:00
bolbol 3c776307b5 runbook: cloture pieges seed.py (transitoire) + derive GITEA_TOKEN (fix permanent .env chgrp/chmod) 2026-07-30 09:46:11 +00:00
bolbol f613d7e738 runbook: phases 3-4-5-6 completees (scope coding, git sync, agents dynamiques, bootstraps) 2026-07-30 08:45:38 +00:00
bolbol 5f5de0e119 runbook: addendum endpoint /mcp casse (SDK mismatch) + verification end-to-end 2026-07-30 08:22:06 +00:00
bolbol dc46310e4d runbook: context-hub securite MCP (ContextVar) + table memory_entries 2026-07-30 07:46:58 +00:00
bolbol 618d3cbf22 runbook: MacBook Brain Watch - filtrage prerelease/staging + consolidation notif (spam Vellum/OpenHuman) 2026-07-29 09:32:12 +00:00
bolbol 8ccd4dc4f2 baserow-mcp-oauth-fix: statut PRODUCTION (DSM bascule + verifie public) 2026-07-28 12:30:47 +00:00
bolbol 9ad1cadb88 baserow-mcp-oauth-fix: statut PRODUCTION (DSM bascule + verifie public) 2026-07-28 12:29:52 +00:00
bolbol 0710d807af update ports-registry: ajout baserow-oauth-proxy/app (fix connecteur Claude.ai) 2026-07-28 12:26:07 +00:00
bolbol e79c44ae90 add common/baserow-oauth-stub/docker-compose.yml (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:53 +00:00
bolbol 03c5ef7b36 add common/baserow-oauth-stub/oauth-protected-resource.json (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:51 +00:00
bolbol e5c2fa657d add common/baserow-oauth-stub/oauth-authorization-server.json (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:50 +00:00
bolbol 145e2118b3 add common/baserow-oauth-stub/nginx.conf (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:47 +00:00
bolbol 22b85b76c6 add common/baserow-oauth-stub/Dockerfile (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:43 +00:00
bolbol 0f11f07567 add common/baserow-oauth-stub/oauth_app.py (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:40 +00:00
bolbol 071be110a8 add common/baserow-mcp-oauth-fix.md (fix connecteur Claude.ai Baserow MCP) 2026-07-28 12:25:39 +00:00
bolbol 9e4bd798af runbook: n8n-baserow ECONNREFUSED https interne (28/07/2026) 2026-07-28 11:21:59 +00:00
bolbol 460850714b infra: watchdog telegram gateway en container autonome (27/07/2026) 2026-07-27 22:55:57 +00:00
bolbol a76e387596 fix: root cause tool_calls casses hermes-nyora = prompt job veille, pas mimo-v2.5 (27/07/2026) 2026-07-27 16:16:08 +00:00
bolbol 3cb81f899f infra: approvals.mode smart + deny rules sur les 4 instances Hermes (27/07/2026) 2026-07-27 15:58:31 +00:00
bolbol e9050da161 infra+garde-fou: fix routing vision text-only + protocole anti-hallucination benchmarks (27/07/2026) 2026-07-27 15:15:03 +00:00
bolbol 5b54dafd88 runbook: refonte site Veille Dr. Nexum (mono-usage, chat par article, arret scraper tunisien) 2026-07-27 07:18:28 +00:00
bolbol 046852b8a8 runbook: principe de routing Telegram Nabil_Perso vs bots Hermes + desactivation Auto Download Films 2026-07-25 23:08:59 +00:00
bolbol 95244f8949 runbook: vrai coupable spam Vellum trouve et corrige (OpenHuman Watch dedup) + decouverte hermes-mail-browser 2026-07-25 22:52:12 +00:00
bolbol 013a4b2a09 runbook: incident digest jamais ordonnance (DSM task manquante) - constat 25/07 2026-07-25 22:34:58 +00:00
bolbol 85eecd4ea3 runbook: ajout cas gsparc-mezzouna-api (.env a jour, container jamais recree) 2026-07-25 18:34:05 +00:00
bolbol 8be10c9d12 runbook: rotation secrets Baserow casse containers standalone (dashboard-terrain) 2026-07-25 18:18:55 +00:00
bolbol 850a7d8f08 docs(cin-search-tt): nettoyage baserow.js + lien mail casse + repo Gitea (24/07/2026) 2026-07-24 12:20:36 +00:00
bolbol 151f7c1637 fix(cin-search-tt): documente regression RAS + correctif hardcode Baserow (24/07/2026) 2026-07-24 11:34:34 +00:00
bolbol 157d204f05 docs: root cause hallucination refus job orientini - langage anti-refus contre-productif 2026-07-24 00:20:55 +00:00
Nabil Derouiche 117c61b056 runbook: n8n index unique degrade insights_metadata (collation) — restore litteral impossible, laisse en etat 2026-07-23 21:46:32 +00:00
bolbol d976a92857 Runbook: migration hermes-agent 0.17->0.19 (3 instances, 2026-07-23) 2026-07-23 12:31:50 +00:00
bolbol 4e40dbf2c1 docs(mail-browser): garde-fous /draft-reply (confirmed_by_user, rate-limit 5/h, audit log) testes 2026-07-23 + reponse skills-en-cron 2026-07-23 07:41:58 +00:00
bolbol 7254dcea63 docs(mail-browser): phase 2 attachments+draft-reply deployes et testes (2026-07-23), skill hermes-tt cable sur API 2026-07-23 06:50:35 +00:00
bolbol c7053bc5d6 docs: hermes-mail-browser phase 1 validee en conditions reelles + fix connexion Playwright partagee 2026-07-22 20:53:15 +00:00
bolbol 2fb81aac04 runbook: hermes-mail-browser conteneur deploye et sain (attente auth manuelle) 2026-07-22 20:27:38 +00:00
bolbol 97eb7ce943 docs: acces mail O365 hermes-tt - archivage hermes-mail-proxy (echec Graph) + decision hermes-mail-browser V1 2026-07-22 14:39:49 +00:00