bolbol c4d79c8730 docs(runbooks): piege ACL Synology mcp-nas root namespace vs ssh nas-host

2026-09-02 19:31:29 +00:00

..

baserow-oauth-stub

add common/baserow-oauth-stub/docker-compose.yml (fix connecteur Claude.ai Baserow MCP)

2026-07-28 12:25:53 +00:00

workflows

feat(veille): extension du suivi versions au VPS Contabo et mise a jour DSH/FileBrowser

2026-08-22 17:06:58 +01:00

accents-fleetwide-utf8-fix-20260828.md

docs: runbooks accents fleet-wide UTF-8 + veille nexum (image telegram, fidelite titre, deepseek)

2026-08-29 08:45:39 +01:00

anti-hallucination-benchmarks-recherche-chiffree.md

infra+garde-fou: fix routing vision text-only + protocole anti-hallucination benchmarks (27/07/2026)

2026-07-27 15:15:03 +00:00

audit-data-hermes-20260709.md

runbook: audit data/ 3 instances Hermes 09/07 (complement consolidation)

2026-07-09 15:43:12 +00:00

audit-gemini-accents-20260901.md

audit-gemini-accents: clôture finale Claude (réserves levées, ticket 003)

2026-09-01 20:27:14 +00:00

audit-securite-reseau-nas-20260703.md

docs: audit securite reseau NAS 03/07/2026

2026-07-03 19:23:39 +00:00

audit-total-nas-ports-registry-20260830.md

runbook: audit total NAS 30/08 -- gotenberg gsparc clarifie, hermes-mail-browser/reglement-mcp/hermes-watchdog-telegram documentes, ports-registry.md sync

2026-08-30 09:54:41 +01:00

baserow-mcp-oauth-fix.md

baserow-mcp-oauth-fix: statut PRODUCTION (DSM bascule + verifie public)

2026-07-28 12:30:47 +00:00

baserow-memlimit.md

…

baserow-rotation-casse-containers-standalone.md

runbook: ajout cas gsparc-mezzouna-api (.env a jour, container jamais recree)

2026-07-25 18:34:05 +00:00

baserow-schema-mcp.md

baserow-schema-mcp : blocage SSE DSM resolu (HTTP 1.0 backend), connecteur pret

2026-08-17 17:53:50 +01:00

bifrost-access.md

docs: bifrost-proxy (3086) recette client Hermes Desktop validee, VK stale-cache 3e occurrence, deepseek-v4-flash reajoute au catalogue statique — 11/07/2026

2026-07-11 19:28:40 +00:00

bifrost-google-provider-key-rotation.md

runbook : rotation cles Google Bifrost bloquee par max_retries=0

2026-08-05 17:00:24 +00:00

bifrost-routage-par-cout.md

runbook: bifrost 13 VK deployees + pilote redaction-pro + pieges API/permissions + rotations securite

2026-07-18 12:48:15 +00:00

bifrost-update-procedure.md

Ajout runbook procédure de mise à jour Bifrost (capitalisation)

2026-08-21 16:59:25 +01:00

bifrost-vk-incidents.md

docs: bifrost-proxy (3086) recette client Hermes Desktop validee, VK stale-cache 3e occurrence, deepseek-v4-flash reajoute au catalogue statique — 11/07/2026

2026-07-11 19:28:40 +00:00

boite-a-idees-claude.md

add: boite a idees Claude (veille outils/concepts)

2026-07-08 09:17:16 +00:00

brief-gemini-audit-accents-20260901.md

brief-gemini: ajout reference ticket infra-2026-09-002 et instructions Baserow

2026-09-01 19:27:06 +00:00

brief-gemini-dsh-autonomie-hub-decommission-20260826.md

fix(v2): section 1 corrigee - reduire hermes-hub au lieu de le supprimer (dsh-hub/files-hub en dependent), ingress Cloudflare non pertinent

2026-08-26 19:43:24 +01:00

brief-gemini-hermes-botmode-20260825-v3.md

deploy: brief v3 Nyora/Gemini - Bot Mode accepte, cible v2026.8.19, verrou reseau bloquant

2026-08-25 18:58:10 +01:00

brief-gemini-nyora-notes-mcp-gateway-20260826.md

deploy: brief passerelle MCP dediee NyoraNotes - separation multi-agent stricte

2026-08-26 20:52:32 +01:00

brief-gemini-skills-hermes-antigravity-20260821.md

docs: audit factuel flotte hermes 4 instances dsh antigravity skills 21-08-2026

2026-08-21 15:40:42 +01:00

cin-search-tt-migration-docker.md

docs(cin-search-tt): nettoyage baserow.js + lien mail casse + repo Gitea (24/07/2026)

2026-07-24 12:20:36 +00:00

cleanup-stack-documentaire.md

docs(infra): clarify nyora-convert-api (3096) vs nyora-doc-api (3050) replacement dichotomy

2026-08-19 17:17:51 +01:00

context-hub-filtrage-scope-par-agent.md

docs: context-hub-filtrage-scope-par-agent - verification transport MCP live (4 tools, CLAUDE+GEMINI)

2026-08-16 22:24:34 +00:00

context-hub-mcp-initialize-bad-request-4-causes.md

runbook: context-hub MCP initialize Bad Request, 4 causes empilees, resolu (30/07/2026)

2026-07-30 21:36:29 +00:00

context-hub-memory-entries-securite-mcp.md

runbook: onboarding HERMES_NABIL (context-hub pret, cote VPS bloque)

2026-07-30 15:46:26 +00:00

correctifs-fragilites-application-20260704.md

docs: application correctifs fragilites (rla-api, n8n, trilium, bifrost-proxy)

2026-07-04 00:26:00 +00:00

decommission-switcher-hub-stabilisation-dsh-20260826.md

docs: mise a jour section 3 avec preuve d execution DSH headless et ecriture disque NAS

2026-08-26 19:33:21 +00:00

desaccentuation-systemique-soul-md-20260901.md

runbook: desaccentuation systemique SOUL.md/PROTOCOL-INFRA.md/DSH (01/09/2026)

2026-09-01 18:45:53 +00:00

dockerfile-layer-cache-ordre.md

runbook: dockerfile layer cache ordre (git hermes-nabil)

2026-07-21 10:43:22 +00:00

dsh-resilience-opencode-direct-bifrost-proxy-tailscale-relay-20260824.md

docs: resilience DSH-VPS (route directe OpenCode) + fix tailscale-vps-ssh-relay + lecon bifrost-proxy auth (24/08/2026)

2026-08-24 18:55:31 +00:00

dsh-vps-procedure.md

feat(veille): extension du suivi versions au VPS Contabo et mise a jour DSH/FileBrowser

2026-08-22 17:06:58 +01:00

ecriture-naturelle-firecrawl-4-instances.md

docs: ecriture naturelle + acces Firecrawl sur les 4 instances Hermes

2026-07-19 23:41:15 +01:00

envoi-fichier-telegram.md

common: >50 Mo → renvoi vers runbook partage-pingvin

2026-07-04 19:40:29 +00:00

fragilites-dependances-stack-20260703.md

docs: analyse fragilites dependances stack 43 containers

2026-07-03 19:59:37 +00:00

generation-chunkee-taches-volumineuses.md

…

git-push-depuis-mcp-nas.md

docs: fallback API HTTP Gitea sans git (mcp-nas)

2026-07-08 09:32:31 +00:00

GSTACK-EVALUATION-MACBOOK-VS-HERMES.md

…

guardrails-flotte-hermes-hard-stop-tirith-verificateur-12-08-2026.md

runbook: guardrails flotte hermes (hard_stop, tirith, verificateur croise) + incidents decouverts

2026-08-12 23:55:17 +01:00

HEBERGEMENT-SITES-STATIQUES.md

…

hermes-docker-access-projects-20260829.md

deploy: acces Docker complet (socket + dossier projets) pour hermes-tt/nyora/perso

2026-08-29 22:55:02 +01:00

hermes-hub-deploiement.md

docs: update hermes-hub-deploiement.md with WebSocket proxy bridge architecture and live test verification

2026-08-20 14:30:44 +00:00

hermes-nabil-images-flyers-navigateur.md

docs(hermes-nabil): routage image OpenRouter par besoin et par cout

2026-07-18 11:49:01 +00:00

hermes-nabil-vps-deploiement.md

docs(hermes-nabil): runbook deploiement VPS Contabo

2026-07-18 05:49:57 +00:00

hermes-skills-hub-scanner-securite.md

runbook: hermes-nabil - copywriting/content-strategy/social + constats audit (thumbnail casse, topics.md, TACHES.md, reseau)

2026-08-20 14:13:34 +02:00

hermes-vers-bifrost-bifrost-proxy.md

runbook: Hermes x3 -> Bifrost via bifrost-proxy

2026-07-15 07:33:06 +00:00

hermes-version-tracking.md

fix: Gate 1 echec en audit independant (secrets sans verrou technique) + rotation ctx-hub nyora + migration tt/perso v2026.8.19

2026-08-25 21:52:57 +01:00

html-to-png-puppeteer.md

consolidation: fusion doublons (mcp-nas, opencode, bifrost-vk, doc-api rebuild), purge obsoletes (gotenberg, ports-registry racine), re-spherage runbooks metier (perso/tt/nyora), refonte _INDEX.md — 09/07/2026

2026-07-09 12:28:30 +00:00

i-have-adhd-skill-adoption.md

deploy: extension i-have-adhd vers hermes-nabil (VPS)

2026-07-31 19:06:15 +00:00

MAIL-BROWSER-HERMES-TT.md

docs(mail-browser): garde-fous /draft-reply (confirmed_by_user, rate-limit 5/h, audit log) testes 2026-07-23 + reponse skills-en-cron

2026-07-23 07:41:58 +00:00

mcp-nas-acl-synology-claude-staging-20260902.md

docs(runbooks): piege ACL Synology mcp-nas root namespace vs ssh nas-host

2026-09-02 19:31:29 +00:00

mcp-nas-container-pid-namespace-blindspot.md

runbook: piege ps-aux host vs namespace PID container (mcp-nas)

2026-08-04 21:29:00 +00:00

mcp-nas-reference.md

consolidation: fusion doublons (mcp-nas, opencode, bifrost-vk, doc-api rebuild), purge obsoletes (gotenberg, ports-registry racine), re-spherage runbooks metier (perso/tt/nyora), refonte _INDEX.md — 09/07/2026

2026-07-09 12:28:30 +00:00

mcp-nas-security-audit.md

manche 4: SMTP migration OVH->ik.me + INCIDENT state.db (lecon: jamais replace texte sur .db)

2026-07-09 22:43:39 +00:00

mcp-sessions-pattern.md

docs: pattern IP sessions Claude-User mcp-vps/mcp-nas + incident exposition tokens Gitea

2026-07-12 08:01:13 +00:00

mcp-token-croise-reglement-definitif.md

runbook: piege token croise MCP reglement-definitif (23-24/08)

2026-08-24 07:30:37 +00:00

mcp-vps.md

runbook: mcp-vps (MCP VPS memory-node, Cloudflare Tunnel) — 12/07/2026

2026-07-11 22:50:01 +00:00

mecanisme-implication-hermes-gemini-garde-fous.md

process: mecanisme implication hermes-nyora/Gemini dans les garde-fous durables (24/08)

2026-08-24 09:59:12 +00:00

migration-hermes-0.19-20260723.md

Runbook: migration hermes-agent 0.17->0.19 (3 instances, 2026-07-23)

2026-07-23 12:31:50 +00:00

migration-mimo-v25-cerveau-hermes.md

docs: etat des lieux migration cerveau -- cloture 2026-08-17

2026-08-18 20:24:55 +00:00

n8n-baserow-https-interne-econnrefused.md

runbook: n8n-baserow ECONNREFUSED https interne (28/07/2026)

2026-07-28 11:21:59 +00:00

n8n-credentials-corruption-veille-consolidation.md

runbook: corruption credentials n8n + consolidation veille Dr. Nexum (14/07/2026)

2026-07-14 07:11:16 +00:00

n8n-insights-collation-index-doublons.md

runbook: n8n index unique degrade insights_metadata (collation) — restore litteral impossible, laisse en etat

2026-07-23 21:46:32 +00:00

n8n-skills-officiels.md

docs: runbook skills n8n officiels + maj _INDEX

2026-07-10 00:23:32 +00:00

nginx-proxy-dns-resolution.md

Documentation règle transversale résolution DNS dynamique dans proxies Nginx (anti-502)

2026-08-21 19:56:56 +01:00

nyora-convert-api-fix-multi-lots-heuristique-vision-20260830.md

docs: runbook correctif nyora-convert-api multi-lots et heuristique vision (pack-mp1)

2026-08-30 15:01:52 +01:00

nyora-definition-fondatrice.md

…

nyora-doc-api-hermes-guide.md

…

nyora-doc-api-rebuild.md

consolidation: fusion doublons (mcp-nas, opencode, bifrost-vk, doc-api rebuild), purge obsoletes (gotenberg, ports-registry racine), re-spherage runbooks metier (perso/tt/nyora), refonte _INDEX.md — 09/07/2026

2026-07-09 12:28:30 +00:00

nyora-doc-api-template-restyle-cause-racine.md

docs: restyle=full implémenté + retrait total des footers — déployé et testé 08/07

2026-07-08 13:53:29 +00:00

nyora-notes-mcp-gateway-deploiement-20260826.md

docs: mise a jour runbook nyora-notes-mcp avec fix de routage tag automatique

2026-08-26 20:25:16 +00:00

opencode-go-migration.md

consolidation: fusion doublons (mcp-nas, opencode, bifrost-vk, doc-api rebuild), purge obsoletes (gotenberg, ports-registry racine), re-spherage runbooks metier (perso/tt/nyora), refonte _INDEX.md — 09/07/2026

2026-07-09 12:28:30 +00:00

openrouter-image-gen.md

…

partage-pingvin-gros-fichiers.md

common: runbook partage Pingvin fichiers > 50 Mo (cookie auth, chunks 30 Mo)

2026-07-04 19:39:33 +00:00

partition-systeme-nas-du-vs-df-permissions.md

runbook: partition systeme NAS pleine - cause python3.8 site-packages orpheline (resolu 20/07)

2026-07-19 23:14:45 +00:00

pdfkit-widthofstring-corruption-troncature.md

deploy: runbook pdfkit widthOfString corruption flux (rla-api)

2026-08-22 08:17:48 +00:00

permissions-credentials-cles-chmod.md

docs: runbook commun - permissions credentials/cles (piege 777)

2026-07-05 01:06:12 +00:00

ports-registry.md

runbook: audit total NAS 30/08 -- gotenberg gsparc clarifie, hermes-mail-browser/reglement-mcp/hermes-watchdog-telegram documentes, ports-registry.md sync

2026-08-30 09:54:41 +01:00

prompt-defensif-anti-refus-contre-productif.md

docs: root cause hallucination refus job orientini - langage anti-refus contre-productif

2026-07-24 00:20:55 +00:00

PROTOCOL-INFRA.md

baserow-schema-mcp : blocage SSE DSM resolu (HTTP 1.0 backend), connecteur pret

2026-08-17 17:53:50 +01:00

rapport-gemini-phase-a-pilote-botmode-20260825.md

docs: rapport Phase A bascule hermes-nyora v2026.8.19 + gates Bot Mode

2026-08-25 21:21:47 +01:00

regle-source-generation-documentaire-zone-sud.md

roadmap 17/08 : discipline seam + regle anti-inference generation Zone Sud

2026-08-17 07:59:13 +00:00

reglement-definitif-fix-mcp.md

docs: runbook reglement-definitif — section durcissement securite (token rotation, rate limit, sessions HTTPS, 9e tool MCP)

2026-08-23 17:18:51 +00:00

rich-messages-telegram.md

…

rla-api-dotenv-override-baserow-https.md

docs(rla-api): documentation de la résolution définitive et du build context /volume1/docker/rla-api-src

2026-08-21 21:44:54 +01:00

rotation-secrets-inventaire.md

secrets(rotation): B5 -- mot de passe legacy famille 2L2u519w* largement embarque (empreinte, pas de valeur)

2026-08-08 13:14:27 +01:00

runbook-audit-charge-nas-ds920-methode-2026-07.md

runbook audit charge: actions cloturees (flaresolverr purge, agent-perso 768m applique)

2026-07-12 13:31:58 +00:00

RUNBOOK-HERMES-UPDATE.md

…

runbook-n8n-llm-bifrost.md

…

seam-discipline-hermes.md

roadmap 17/08 : discipline seam + regle anti-inference generation Zone Sud

2026-08-17 07:59:13 +00:00

skills-concurrents-pdf-docx-pptx-xlsx.md

skills-concurrents: 3e vague 2026-07-12 — archivage python-pptx-documents (perso)

2026-07-12 14:36:23 +01:00

smart-approvals-deny-rules-4-instances.md

infra: approvals.mode smart + deny rules sur les 4 instances Hermes (27/07/2026)

2026-07-27 15:58:31 +00:00

sobriete-code-ponytail.md

deploy: skill sobriete-code (7 regles Ponytail) sur hermes-tt et hermes-nyora

2026-07-05 00:20:14 +00:00

ssd-cache-endurance-usb-backup.md

docs: runbook cache SSD write-back + backup USB (2026-07-04)

2026-07-04 00:59:41 +00:00

superpowers-hermes-installation.md

docs: runbook deploiement superpowers (hermes, claude code, antigravity, pieges tls et ssh path synology)

2026-08-18 23:27:18 +01:00

synology-scp-sftp-indisponible-cat-ssh.md

runbook: scp/sftp indisponibles sur ce Synology, contournement cat|ssh

2026-08-17 00:25:56 +01:00

tailscale-firewall-nyora-notes-onboarding-13-08-2026.md

runbook: addendum 4 — correction placement credentials hermes-nabil (vrai conteneur trouve via vps.internal, pas mcp-vps)

2026-08-13 15:39:04 +00:00

tap-gitea-hermes-skills.md

…

telegram-duplication-getupdates-offset.md

runbook: telegram duplication getUpdates offset + fix DNS agents

2026-07-09 06:15:16 +00:00

telegram-flood-control-overflow-split-et-gitea-deploy-token.md

runbook: telegram flood-control overflow-split fix + gitea deploy-token (16/07)

2026-07-16 16:28:31 +01:00

telegram-routing-nabil-perso-vs-hermes-bots.md

runbook: principe de routing Telegram Nabil_Perso vs bots Hermes + desactivation Auto Download Films

2026-07-25 23:08:59 +00:00

tourisme-tunisie-skill.md

docs(runbook): tourisme-tunisie v1.1 cafes/parcs/archeo

2026-07-16 16:05:56 +00:00

transfert-secret-inter-machines.md

docs: transfert de secret sans exposition (RSA-OAEP)

2026-07-18 08:33:20 +00:00

trilium-update-procedure.md

docs(trilium): procedure de mise a jour v0.105.0 et rapport d'investigation

2026-08-21 21:15:23 +01:00

veille-chunking-nyora-root-cause.md

fix: root cause tool_calls casses hermes-nyora = prompt job veille, pas mimo-v2.5 (27/07/2026)

2026-07-27 16:16:08 +00:00

veille-infra-v2-montee-fix-activation.md

runbook: vrai coupable spam Vellum trouve et corrige (OpenHuman Watch dedup) + decouverte hermes-mail-browser

2026-07-25 22:52:12 +00:00

veille-macbook-brain-watch-filtre-prerelease.md

runbook: MacBook Brain Watch - filtrage prerelease/staging + consolidation notif (spam Vellum/OpenHuman)

2026-07-29 09:32:12 +00:00

veille-nexum-rich-job-20-sources.md

runbook: veille Nexum job riche 20 articles + sources

2026-07-14 20:12:13 +00:00

veille-nexum-site-refonte-25-26-07-2026.md

runbook: refonte site Veille Dr. Nexum (mono-usage, chat par article, arret scraper tunisien)

2026-07-27 07:18:28 +00:00

veille-nexum-sources-reddit-403-nas-ip.md

pivot: Reddit abandonne (Responsible Builder Policy), commentaires YouTube branches dans le vrai pipeline

2026-07-31 10:11:42 +00:00

veille-nexum-vk-morte-fuseau-n8n.md

runbook: veille Nexum — VK Bifrost morte + fuseau n8n (14/07)

2026-07-14 19:07:25 +00:00

veille-versions-stack.md

feat(veille): extension du suivi versions au VPS Contabo et mise a jour DSH/FileBrowser

2026-08-22 17:06:58 +01:00

vision-auxiliaire-routing-text-only-modeles.md

infra+garde-fou: fix routing vision text-only + protocole anti-hallucination benchmarks (27/07/2026)

2026-07-27 15:15:03 +00:00

vps-hermes-nabil-visuels-yasmi.md

runbook: bug concurrence tempfile + nyora_telegram + methode transfert fichier

2026-07-19 10:46:54 +00:00

vps-memory-node.md

docs(vps-memory-node): section mcp-vps (organe d action blackout) — 12/07/2026

2026-07-11 22:50:31 +00:00

vps-qbittorrent-docker.md

runbook: VPS qBittorrent Docker + VPN WireGuard kill-switch (migration 12/07)

2026-07-12 16:12:23 +00:00

vps-transition-swap-hdd.md

docs: VPS memory-node (Objectif A) — miroir git + rsync + restic en pull, MAJ swap-hdd (claude-oversight scopé, NAS→VPS 22 KO)

2026-07-10 22:48:32 +01:00

watchdog-telegram-gateway-container-autonome.md

infra: watchdog telegram gateway en container autonome (27/07/2026)

2026-07-27 22:55:57 +00:00

wg-easy-decommission-tailscale.md

docs: décommission wg-easy remplacé par Tailscale

2026-07-08 20:30:05 +00:00