# NAS Runbooks — Index

> Referentiel operationnel partage entre hermes-tt, hermes-nyora, hermes-perso.
> Chaque instance ecrit dans son dossier. Tous peuvent lire tous les dossiers.
> Derniere mise a jour : auto-generee par n8n (dimanche 03:00)

---

## common (infra partagee, transverse aux 3 instances)
| Runbook | Date | Tags |
|---------|------|------|
| [Acces Bifrost (passerelle LLM, vision/OCR)](common/bifrost-access.md) | 2026-06-14 | infra, bifrost, llm, vision, x-bf-vk |
| [Audit securite reseau NAS (surface WAN, crowdsec, firewall, wg-easy)](common/audit-securite-reseau-nas-20260703.md) | 2026-07-03 | infra, securite, reseau, crowdsec, firewall, wg-easy, wan |
| [Fragilites de dependances stack 43 containers (restart/persistance/couplages)](common/fragilites-dependances-stack-20260703.md) | 2026-07-03 | infra, stack, restart, couplage, dependances, rla-api, n8n |
| [Correctifs fragilites appliques (rla-api compose, n8n/trilium restart, bifrost-proxy healthcheck)](common/correctifs-fragilites-application-20260704.md) | 2026-07-04 | infra, correctifs, rla-api, n8n, bifrost-proxy, healthcheck |
| [Rebuild nyora-doc-api + footer Nyora DOCX (procedure SSH host, multipart, verif XML)](common/nyora-doc-api-rebuild-footer-docx.md) | 2026-07-04 | infra, nyora-doc-api, docker, rebuild, footer, docx |
| [Generation / edition d'images IA (nano-banana)](common/openrouter-image-gen.md) | 2026-06-14 | infra, openrouter, image, nano-banana |
| [Gotenberg HTML->PDF (piege police web)](common/gotenberg-pdf.md) | 2026-06-14 | infra, gotenberg, pdf, fonts |
| [Migration provider OpenCode Go (+ fallback OpenRouter)](common/migration-provider-opencode-go.md) | 2026-06-14 | infra, opencode, hermes, family-help, fallback |
| [nyora-doc-api v3 Premium - guide usage Hermes](common/nyora-doc-api-hermes-guide.md) | 2026-07-01 | infra, nyora-doc-api, hermes, docx, xlsx, pptx, pdf |
| [Envoi de fichiers via Telegram depuis les agents (sendDocument, fix fallback mail)](common/envoi-fichier-telegram.md) | 2026-07-04 | infra, hermes, telegram, senddocument, fichiers |
- `common/partage-pingvin-gros-fichiers.md` — Partage fichiers > 50 Mo via Pingvin/pv.bolbol.tn (cookie auth, chunks 30 Mo, skill partage-pingvin)
| [Skills concurrents à nyora-doc-api (docx/pdf/pptx/xlsx) sur les 3 instances — 2e vague auditée](common/skills-concurrents-pdf-docx-pptx-xlsx.md) | 2026-07-02, MAJ 2026-07-04 | infra, hermes, skills, docx, pdf, pptx, xlsx, nyora-doc-api |
| [Generation chunkee obligatoire pour taches volumineuses (DeepSeek V4 Flash)](common/generation-chunkee-taches-volumineuses.md) | 2026-07-02 | infra, hermes, deepseek, truncation, chunking, skill |
| [Bifrost access - MAJ sk-bf-/Authorization Bearer, piege allow_all_keys, limite anthropic providers custom, recette Hermes Desktop](common/bifrost-access.md) | 2026-07-02 | infra, bifrost, hermes-yesmine, virtual-keys |
| [gstack : evaluation et decision (MacBook Claude Code natif, pas hermes-perso)](common/GSTACK-EVALUATION-MACBOOK-VS-HERMES.md) | 2026-07-02 | infra, gstack, claude-code, hermes-perso, macbook |

| [Bifrost VK OpenCode fix (403/no route)](common/BIFROST-VK-OPENCODE-FIX.md) | 2026-06-23 | infra, bifrost, opencode, vk |
| [Hebergement sites statiques Hermes (container nginx dedie)](common/HEBERGEMENT-SITES-STATIQUES.md) | 2026-06-22 | infra, nginx, static, hermes |
| [MCP NAS scripting reference (sessions, limites, services internes)](common/MCP-NAS-SCRIPTING.md) — règles 1-3 obsolètes, voir v2 | 2026-06-23 | infra, mcp-nas, scripting |
| [MCP NAS run_command v2 (P0) : heredocs, commandes longues, busy-check, reset_session](common/mcp-nas-run-command-v2.md) | 2026-07-04 | infra, mcp-nas, run-command, tmux, reset-session |
| [Migration OpenRouter vers OpenCode Go (endpoint zen/go/v1)](common/OPENCODE-GO-MIGRATION.md) | 2026-06-16 | infra, opencode, migration, llm |
| [Cleanup stack documentaire (Pandoc/Gotenberg/Carbone retires)](common/cleanup-stack-documentaire.md) | 2026-06 | infra, cleanup, doc-stack |
| [Git push depuis mcp-nas (172.17.0.1 vs 192.168.100.33)](common/git-push-depuis-mcp-nas.md) | 2026-06-15 | infra, git, mcp-nas |
| [SOUL.md hermes-perso -- ingest API veille (score sur 10 vers sur 100)](common/hermes-perso-SOUL-veille-ingest.md) | 2026-06-15 | infra, hermes-perso, soul, veille |
| [HTML vers PNG headless (Puppeteer + Gotenberg)](common/html-to-png-puppeteer.md) | 2026-06-21 | infra, html, png, puppeteer, gotenberg |
| [Kanban evaluateur-ao (evaluation AO parallele hermes-tt)](common/kanban-evaluateur-ao.md) | 2026-06-18 | infra, kanban, ao, hermes-tt |
| [Vision fondatrice Nyora + SOUL.md 3 instances](common/nyora-definition-fondatrice.md) | 2026-06-23 | infra, nyora, soul, vision |
| [n8n Code nodes LLM vers Bifrost obligatoire](common/runbook-n8n-llm-bifrost.md) | 2026-06-15 | infra, n8n, bifrost, code-node |
| [Tap Gitea prive hermes-skills (6 skills perso, 3 instances)](common/tap-gitea-hermes-skills.md) | 2026-06-15 | infra, gitea, skills, hermes |
| [Veille hebdo Nyora (kanban fan-out 6 sources, profil veilleur)](common/veille-hebdo-nyora.md) | 2026-06-18 | infra, veille, nyora, kanban |
| [Workflow Claude-GLM Nyora API Builder (planner/executor/reviewer)](common/workflow-claude-glm-nyora.md) | 2026-06-15 | infra, workflow, claude, glm |
## hermes-perso
| Runbook | Date | Tags |
|---------|------|------|
| [CrowdSec sur DSM](hermes-perso/security/crowdsec-dsm.md) | 2026-06-12 | securite, ssh, iptables |

## hermes-tt
| Runbook | Date | Tags |
|---------|------|------|
| [rla-api : gestion utilisateurs & superadmin par defaut (piege users.json bake dans l'image)](hermes-tt/rla-api-users-superadmin.md) | 2026-07-04 | infra, rla-api, users, superadmin, bcrypt, gitea |

## hermes-nyora
| Runbook | Date | Tags |
|---------|------|------|
| [Veille Dr. Nexum -- Email enrichi (fin du bug email illisible)](hermes-nyora/veille-nexum-email-enrichi.md) | 2026-07-03 | nyora, dr-nexum, veille, email, n8n, cron |
| [VPS Contabo -- WireGuard + qBittorrent natif Ubuntu (pas Docker, kill-switch)](hermes-nyora/vps-contabo-wireguard-qbittorrent-natif.md) | 2026-07-05 | nyora, vps, contabo, wireguard, qbittorrent, kill-switch, natif |
| [Backup NAS -> VPS Contabo (restic chiffre, throttle, securise)](hermes-nyora/backup-nas-vps-contabo-restic.md) | 2026-07-05 | nyora, vps, contabo, backup, restic, securite |
| [Acces supervision Claude sur VPS Contabo (claude-oversight, sudo NOPASSWD, alerte connexion)](hermes-nyora/vps-contabo-acces-claude-supervision.md) | 2026-07-05 | nyora, vps, contabo, securite, acces, supervision |
| [Surveillance trafic sortant sous seuil fair-use Contabo](hermes-nyora/vps-contabo-surveillance-bandwidth.md) | 2026-07-05 | nyora, vps, contabo, bandwidth, monitoring, fair-use |

---

## Regles de contribution
- **Ecriture** : chaque instance ecrit uniquement dans son dossier `hermes-<nom>/`
- **Lecture** : tous les dossiers sont lisibles par toutes les instances
- **Format** : utiliser RUNBOOK-TEMPLATE.md
- **Apres chaque runbook** : poster une note NyoraNotes avec tag [infra, runbook]
- [common/rich-messages-telegram.md](common/rich-messages-telegram.md) — Telegram rich_messages flag + restart Portainer API (2026-06-24)
| [Cache SSD write-back en fin de vie + backup USB urgence](common/ssd-cache-endurance-usb-backup.md) | 2026-07-04 | infra, ssd, cache, backup, usb, mcp-nas |
| [Ports Registry NAS (source de verite etat des services)](common/ports-registry.md) | 2026-07-04 | infra, ports, registry, nas |
| [Skill sobriete-code (7 regles Ponytail, hermes-tt + hermes-nyora)](common/sobriete-code-ponytail.md) | 2026-07-05 | dev, skill, code, tokens, couts, hermes-tt, hermes-nyora |
| [Permissions credentials/cles - piege 777 et regle transverse (skill nas-ops)](common/permissions-credentials-cles-chmod.md) | 2026-07-05 | infra, securite, credentials, permissions, chmod |
| [Bifrost VK stale-cache + fallback OpenRouter vers OpenCode Go](common/bifrost-vk-stale-cache-et-fallback-opencode.md) | 2026-07-06 | infra, bifrost, hermes, opencode, openrouter, cout |