MEMORY.md/learned.md/memory_summary.md/raw_memories.md churn from live sessions (DIFR deadlock diagnosis, model-swap ops, outpost verification etc.); new memory root --home-dank-.omp-agent-- started with learned.md.
2.0 KiB
Use /home/dank/Projects/serverAppConfigs as the repo root; current repo state wins over memory. Main hosts: Dankclaw 192.168.0.143, Dankserver 192.168.0.235, FrankBook-Pro 192.168.0.112 macOS x86_64. Services are mostly rootless Podman Quadlet user units; use systemctl --user and podman inventory commands. Caddy on Dankclaw fronts franksdank.cloud with Porkbun DNS-01 wildcard certs and Pi-hole split DNS; keep Caddy admin on for hot reload. Authentik/Anubis cannot be fully verified with curl because Anubis returns JS challenge pages.
Hermes state lives at /home/dank/hermes-data:/data; do not overwrite live config from sanitized config.yaml.example. If Hermes WebUI cannot reach Signal, first check signal-cli-daemon.service and port 8080; a recent diagnostic found Hermes/WebUI/dashboard healthy but signal-cli-daemon inactive/disabled. Hermes main model is frank-default-large at 192.168.0.143:7770; vision auxiliary routes to Gemma FLM gemma4-it:e4b at 192.168.0.143:7771/v1.
frank-default-large current durable state: Dankclaw Strix Halo gfx1151, kingjones777/Qwen3.8-Flash-Next-ROCmFP4-STRIX-GGUF via kingjones30/ROCmFPX at /home/dank/GitPackages/kingjones-ROCmFPX/build/bin/llama-server. Keep --fit off, keep mmap/page-cache PLE streaming, avoid bare env vars TEMP/HOST/GPU_MAX_HEAP_SIZE, and do not enable MTP/spec decoding casually. If QSA flash-attn graph build fails, apply the qwen4exp-qsa-f32-mask patch.
Media: Plex/Tautulli migrated to Dankserver Quadlets with UserNS=host; Plex data is in-place at /var/lib/plexmediaserver and rollback chown is 997:984. Jellyfin and Copyparty mounts were verified read-only; user directive says stop touching Jellyfin/Copyparty unless asked. Copyparty bare A is dangerous: it grants everyone full access; read-only uses r:ra,dank without write/move/delete perms. *arr stack is intended for FrankBook-Pro via gluetun VPN, preserving /Volumes/COMPLETE paths.
Never commit secrets. For BIOS on ASUS TUF GAMING B650-E WIFI, use exact board CAP, backup with flashrom reads only, and flash via EZ Flash/FlashBack, not Linux flashrom writes.