Bernt
bae705aa97
- Add NFC ePassport roadmap (ICAO 9303, eIDAS) - Add TensorFlow.js edge face detection (BlazeFace) - Add structured audit logger (GDPR-compliant) - Risk scoring support Part of KYC Apple Native UX v1.1.0
73 lines
2.2 KiB
Markdown
73 lines
2.2 KiB
Markdown
# TOOLS.md - Local Notes
|
|
|
|
Skills define _how_ tools work. This file is for _your_ specifics — the stuff that's unique to your setup.
|
|
|
|
## What Goes Here
|
|
|
|
Things like:
|
|
|
|
- Camera names and locations
|
|
- SSH hosts and aliases
|
|
- Preferred voices for TTS
|
|
- Speaker/room names
|
|
- Device nicknames
|
|
- Anything environment-specific
|
|
|
|
## Examples
|
|
|
|
```markdown
|
|
### Cameras
|
|
|
|
- living-room → Main area, 180° wide angle
|
|
- front-door → Entrance, motion-triggered
|
|
|
|
### SSH
|
|
|
|
- home-server → 192.168.1.100, user: admin
|
|
|
|
### TTS
|
|
|
|
- Preferred voice: "Nova" (warm, slightly British)
|
|
- Default speaker: Kitchen HomePod
|
|
```
|
|
|
|
## Why Separate?
|
|
|
|
Skills are shared. Your setup is yours. Keeping them apart means you can update skills without losing your notes, and share skills without leaking your infrastructure.
|
|
|
|
---
|
|
|
|
## Server-2 (bernt.wavult.com) — sudo & root-access
|
|
|
|
### systemctl/journalctl utan lösenord
|
|
`bernt` har NOPASSWD sudoers för ALLA systemctl/journalctl-verb:
|
|
```bash
|
|
sudo -n systemctl <start|stop|restart|enable|disable|status|is-active|is-enabled> <tjänst>
|
|
sudo -n journalctl -u <tjänst> ...
|
|
```
|
|
Fil: `/etc/sudoers.d/bernt-systemctl` (Defaults !requiretty). `bernt` även i `wheel`.
|
|
|
|
### Full root via AWS SSM (när sudo inte räcker)
|
|
SELinux = **permissive** (blockerar inget). När man behöver root för annat än systemctl:
|
|
```bash
|
|
cd /tmp
|
|
unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN # VIKTIGT: använd default-profil
|
|
export AWS_DEFAULT_REGION=eu-north-1
|
|
# Skriv kommandon i /tmp/ssm-params.json {"commands":[...]}
|
|
CMD_ID=$(aws ssm send-command --instance-ids i-09b2204a52c2f33c9 \
|
|
--document-name AWS-RunShellScript --parameters file:///tmp/ssm-params.json \
|
|
--output text --query 'Command.CommandId')
|
|
sleep 9
|
|
aws ssm get-command-invocation --command-id $CMD_ID --instance-id i-09b2204a52c2f33c9 \
|
|
--query '[Status,StandardOutputContent]' --output json
|
|
```
|
|
- Instance: `i-09b2204a52c2f33c9` | Region: `eu-north-1`
|
|
- SSM kör som **root**. Default AWS-profil = `platform-ai-agent` (har ssm:SendCommand).
|
|
- ⚠️ Hårdkoda ALDRIG secret-nyckeln i echo/env — `+`-tecken manglas. Använd default-profilen (unset env-vars).
|
|
|
|
Add whatever helps you do your job. This is your cheat sheet.
|
|
|
|
## Related
|
|
|
|
- [Agent workspace](/concepts/agent-workspace)
|