serverAppConfigs

Files

T

Frank c527f35bd4 docs(hermes): persistent SSH-tunnel ingress design for Hermex (tunnel user + restricted key options)

Server-side implementation landed on Dankclaw: dedicated 'tunnel' account
(nologin shell, password-locked, key-only auth), sshd drop-in
99-tunnel.conf scoping AllowTcpForwarding to that user with PermitTTY off,
and permitopen="localhost:8787" key-option guidance so a leaked tunnel key
can only forward to the webui port. WebUI stays loopback-only published.

2026-08-31 06:23:13 -07:00

.obsidian

docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

2026-08-28 02:20:06 -07:00

Architecture

docs: authentik/anubis/network corrected to live-verified outpost behavior

2026-08-29 23:55:48 -07:00

Dankclaw

docs(hermes): persistent SSH-tunnel ingress design for Hermex (tunnel user + restricted key options)

2026-08-31 06:23:13 -07:00

Dankserver

docs(arr-chain): TV + music search chains proven live; all-off new-row gotcha