Gabriel Brown
f33da41cc6
A machine's role is now the interview's first question and the one answer Panama records. Servers get the same shell minus the screen: core packages, nvm, Bun, Claude Code and Codex (desktops get Codex too), linger, rootless ports from 80, firewalld, the nginx-bridge network, and a nightly image updater that replaced watchtower for cause. server/containers/ carries junior's 23 compose services -- secrets moved to per-machine .env files that never enter this public repo, every transformed compose proven to render byte-identical to what is live. 'panama server' enables, disables and relinks them; nothing here restarts a running service. 'boot --server' walks a fresh VPS from its root login to a normal install. Five new contracts pin the secrets rule, the catalog's shape, panama-server's behavior, the role plumbing, and the dotfile classification. Claude-Session: https://claude.ai/code/session_01NU5JGiN3JfzqrLQB6wmJ1E
17 lines
464 B
SYSTEMD
17 lines
464 B
SYSTEMD
[Unit]
|
|
Description=Nightly container image updates at midnight
|
|
Documentation=https://git.gbrown.org/gib/Panama
|
|
|
|
[Timer]
|
|
# Midnight local time.
|
|
OnCalendar=*-*-* 00:00:00
|
|
# If the machine was off at midnight, run once after it comes back rather than
|
|
# skipping the day entirely.
|
|
Persistent=true
|
|
# Avoid every timer on the box firing at the same instant.
|
|
RandomizedDelaySec=300
|
|
|
|
[Install]
|
|
# User timers need linger, which setup-server enables.
|
|
WantedBy=timers.target
|