sam-4screen-desktop 2026-9-15:13:3:7

2026-09-15 13:03:07 +10:00
parent 2f4504fd71
commit a39b3ce107
15 changed files with 15 additions and 15 deletions
--- a/Computers/Bumblebee
+++ b/Computers/Bumblebee
@@ -1,22 +0,0 @@
---
-created: 2026-05-26 19:13
-modified: 2026-05-26 19:13
-type: note
-tags:
-  - ai
-  - dev
-  - dev-ops
-  - security
-aliases: []
-source_url: https://www.youtube.com/watch?v=L6iAw5yitfc
---
-# [[Bumblebee - The Open-Source Scanner for Messy Dev Machines]]
-![](https://www.youtube.com/watch?v=L6iAw5yitfc)
-
-In this video, I take a hands-on look at Bumblebee, Perplexity’s new open-source scanner for developer machines, and show how it helps answer one of the hardest supply chain security questions: “Do any dev laptops have a risky package, extension, or AI config sitting on disk right now?”  
-  
-I’ll run Bumblebee live to show how it scans local metadata without running package managers, executing project code, or triggering install scripts. It’s a fast, read-only developer endpoint inventory tool that outputs clean NDJSON so teams can pipe results into scripts, MDM, SIEM workflows, or incident response processes.  
-  
-🔗 Relevant Links  
-Perplexity Bumblebee - https://www.perplexity.ai/hub/blog/perplexity-is-open-sourcing-bumblebee  
-Bumblebee Repo - https://github.com/perplexityai/bumblebee  
--- a/Computers/FAMILY
+++ b/Computers/FAMILY
@@ -1,89 +0,0 @@
---
-created: 2026-08-26
-modified: 2026-08-26
-type: note
-tags:
-  - family
-  - home-lab
-  - console
-  - portal
-  - maintenance
-aliases:
-  - Family Console
-  - Home Lab Console
---
-# FAMILY CONSOLE
-
-Single reference for the self-hosted **Family Home Lab** console. Consolidates the four daily FAMILY notes (Build Status, Enterprise Architecture, S3/Garage, dsh Harness). Authoritative code/plan: `/home/sam/home_network/custom_tools/family_home_lab/` (repo on `.27` desktop; pushed to Gitea `sam/family_home_lab`).
-
-## What it is
-A private web **dashboard + tool launcher + chat tieren** for the family. Log in at `https://console.lab.audasmedia.com.au` and reach every self-hosted service in the home lab (media, docs, storage, AI, notes, portfolio), one per-user account.
-
-## Where it runs / how traffic flows
- **Portal + core stack** run on the **`.13` server** (`/home/sam/Docker/Containers/family-home-lab/`): FastAPI + Jinja2 + HTMX portal on port `8500`, with Postgres (users/prefs), Redis, RabbitMQ, Celery, Garage S3.
- **Reverse proxy / DNS**: existing **Caddy on `.35`**; public zone `*.lab.audasmedia.com.au` → `.35` → `.13`. `*.home.lab` are LAN-only.
- **Data** under `/mnt/data/family-home-lab/` (garage, shared-media, dsh, pi-dashboard) — covered by Borg backup on `.13`.
-
-## How it works (key pieces)
- **Accounts:** four users `sam` / `jo` / `harry` / `finn`. Login = bcrypt password in Postgres (changeable via the portal **Password** page). No SSO — every app keeps its own login.
- **Home dash:** a categorized catalogue with a search box listing all services. Cards open tools; badges mark LAN-only / has-own-login / admin.
- **Files:** upload from your browser → files appear in the webtop tools (e.g. GIMP) under `/media/<user>/`, with thumbnail + view + download (console → email etc.).
- **Transcriber:** audio → MIDI (Basic Pitch) and sheet music (MuScriptor).
- **Admin** (sam only): add/rename users, change passwords, **Pi Dashboard** (live pi agent sessions synced from the pi host), manage the tool catalogue.
-
-## Chat bot (dsh)
-A per-user DeepSeek chat harness (`dsh-sam·jo·harry·finn.lab`), **custom FastAPI + SSE**, one container each on `.13` (ports 3081–3084). Includes:
- **Model picker** — chat (opencode-go flash) · reasoning (deepseek flash) · coding (deepseek pro) · **multimodal (GLM-5v)**. Default is opencode-go flash.
- **Memory** — conversations saved with a sidebar (list/new/delete).
- **Web & doc summarise**, **image ingest**, **image generate**, **video/screen-recording analyze** (ffmpeg → GLM).
- **Hardened** — no shell/system calls: `cap_drop ALL`, read-only rootfs, non-root; read /workspace per user (on `/mnt/data/.../dsh/<user>/`).
- Vision/media go through **OpenRouter**; text chat through **OmniRoute** on `.13:20129`.
-
-## Insights for future LLMs / maintenance (how to fix, edit, add)
- **Edit → deploy flow:** change code in the repo (`.27`), commit + push to Gitea, then `scp`/rsync the changed folders to the matching `.13` dir and `docker compose up -d --build <service>`. Caddy edits happen on **`.35`** (back up `Caddyfile` first; reload with `caddy reload`).
- **Auth gotcha:** Caddy basic-auth was **removed from the browser media/chat tools** earlier because it broke their asset loading (401s) — those have no login now. Apps with their own login kept it. Keep this in mind when adding a web tool.
- **OmniRoute:** the built-in `auto/best-*` pools are flaky (stream empty). **Don't add combos via its API** (creates empty combos). dsh pins **deterministic** provider/model strings instead. OmniRoute is now behind Caddy basic-auth + a strong password (was being brute-forced).
- **Secrets hygiene:** never put `.env`, API keys, or passwords in the repo. `.gitignore` covers `.env`/`.pi/`. OmniRoute/OpenRouter tokens are held by Sam (keep out of memory/notes).
- **Kids:** jo/harry/finn get a reduced view (no AI/chat, no admin-only tools) and no shell in dsh.
- **Storage:** Garage S3 buckets `sam, jo-media, harry, finn, shared-media` (S3 needs ≥3-char names). Per-user files land in `shared-media/<user>/`.
-
-## Architecture (Mermaid)
-
-```mermaid
-flowchart LR
-    U[Family browsers / phones] -->|https *.lab.audasmedia.com.au| C[<b>Caddy</b> :35 reverse proxy]
-    C -->|console.lab| P[<b>Console portal</b> FastAPI+HTMX :8500]
-    C -->|dsh-*.lab| D[<b>dsh chat</b> per-user x4 SSE]
-    C -->|gimp/video/audio.lab| M[<b>WeWebtop media tools</b> GIMP/KdenLive/Audacity/LMMS]
-    C -->|metube/outline/jellyfin/nextcloud +| APPS[~40 self-hosted apps]
-    P -->|logins/admin| PG[(Postgres+Redis)]
-    P -->|transcribe| W[<b>Celery workers</b> RabbitMQ]
-    D -->|LLM| OR[<b>OmniRoute</b> :20129 gateway]
-    OR -->|chat/reasoning/coding| OC[opencode-go · deepseek flash/pro]
-    D -->|vision/video| OL[OpenRouter → GPT-5 · GLM-5v]
-    D -->|audio → text| WS[Whisper (faster-whisper :13:5000)]
-    W -->|MIDI/sheet| BP[Basic Pitch · MuScriptor]
-    U -->|Voice page| V[<b>Jervis</b> voice agent :8501]
-    V -->|HA REST/MQTT| HA[Home Assistant :30]
-    P -->|Files / S3| G[(Garage S3 + shared-media .13)]
-    G -.->|Borg backup| BACK[(Amazon S3 offsite)]
-```
-
-## Diagrams
- **Archify map** (interactive HTML): repo → `docs/family-home-lab-map.html` (+ source JSON `docs/archify/family-home-lab.architecture.json`)
- **Mermaid**: see "Architecture (Mermaid)" above.
-
-## Project management
- **Tasks:** [[Vikunja]] → project "Family Home Lab" — https://vikunja.lab.audasmedia.com.au/projects/8
- **Docs (AI bots):** Outline → collection "Family Home Lab" — https://outline.lab.audasmedia.com.au/collection/family-home-lab-XgbVukpg1g
- **Source:** Gitea `sam/family_home_lab`; Obsidian vault `sam/obsidian-vault`
-
-## Tools involved (employment)
- **Portal/dash** — FastAPI · Jinja2 · HTMX · Postgres/pgvector · Celery/RabbitMQ · Redis · boto3 · docker compose · Caddy
- **AI** — OmniRoute (gateway) · OpenRouter (vision/image) · DeepSeek/opencode-go · GLM-5v · Basic Pitch (tensorflow) · MuScriptor · piper TTS · dsh (custom chat)
- **Apps** — Garage S3 · Gitea · Vikunja · Outline · Home Assistant (Jervis) · Metube · Jellyfin · Nextcloud · Immich · +40 self-hosted
- **Infra** — NixOS (.13/.27) · Ubuntu (.35) · pi agent · systemd · RustDesk
-
-## Related
- Repo: `/home/sam/home_network/custom_tools/family_home_lab/` (`README.md`, `docs/websites.md`, `plan.md`)
- [[Websites on Nixos-Dekstop 13]] · [[Home Network Map Overview]] · [[Docker Containers]]