sync: auto-sync from GURU-BEAST-ROG at 2026-04-27 13:15:49

Author: Mike Swanson Machine: GURU-BEAST-ROG Timestamp: 2026-04-27 13:15:49
2026-04-27 13:15:49 -07:00
parent e0a117b434
commit 206cd2f929
3 changed files with 99 additions and 60 deletions
--- a/.claude/machines/guru-beast-rog.md
+++ b/.claude/machines/guru-beast-rog.md
@@ -1,7 +1,7 @@
 # Machine: GURU-BEAST-ROG

 **Hostname:** GURU-BEAST-ROG
-**Last Updated:** 2026-03-24
+**Last Updated:** 2026-04-26

 ---

@@ -22,10 +22,27 @@
 | Spec | Value |
 |------|-------|
 | OS | Windows 11 Pro (26200) |
-| Python | 3.x (installed) |
+| Python | 3.12.10 |
 | Node.js | v24.14.0 |
-| Ollama | v0.18.2 |
-| Git | Installed (Git for Windows) |
+| Ollama | v0.21.0 |
+| Git | 2.52.0.windows.1 |
+| jq | 1.8.1 |
+| sops | 3.12.2 |
+| age | installed (winget) |
+| 1Password CLI | 2.33.1 |
+| GrepAI | v0.35.0 (grepai.exe in repo root) |
+
+---
+
+## Ollama Models
+
+| Model | Size |
+|-------|------|
+| gemma3:27b | 17.4 GB |
+| qwen3:32b | 20.2 GB |
+| qwen3:14b | 9.3 GB |
+| codestral:22b | 12.6 GB |
+| nomic-embed-text | 0.3 GB |

 ---

@@ -33,8 +50,11 @@

 - **Working Directory:** C:\Users\guru\ClaudeTools
 - **User:** guru
- **Shell:** bash (Git for Windows)
+- **Shell:** bash (Git for Windows / MINGW64)
 - **Git:** Configured for Gitea (git.azcomputerguru.com)
+- **Identity:** mike (identity.json configured)
+- **Vault:** C:/Users/guru/vault (SOPS + age, decryption working)
+- **OP_SERVICE_ACCOUNT_TOKEN:** configured in ~/.bashrc

 ---

@@ -43,20 +63,23 @@
 | Interface | Address |
 |-----------|---------|
 | Wi-Fi | 10.2.51.228 |
-| LAN (Local Area Connection) | 192.168.2.3 |
+| Tailscale | 100.101.122.4 |

 ---

 ## Capabilities

 - [x] Git operations
- [x] SSH access to infrastructure
+- [ ] SSH access to infrastructure (key generated, not yet deployed to servers)
 - [x] GrepAI semantic search (watcher running)
- [x] Ollama local AI (nomic-embed-text installed; qwen3:14b, codestral:22b pulling)
+- [x] Ollama local AI (5 models, GPU-accelerated)
 - [x] MCP servers configured (filesystem, sequential-thinking, grepai)
 - [x] NVIDIA RTX 4090 GPU (CUDA compute)
 - [x] Claude Code CLI
 - [x] Bypass permissions mode (settings.json configured)
+- [x] SOPS vault decryption
+- [x] 1Password CLI (service account)
+- [x] Tailscale

 ---

@@ -65,5 +88,5 @@
 - Powerhouse desktop -- best GPU and most RAM across all workstations
 - RTX 4090 does NOT have the GSP firmware bug that affects the 5070 Ti on Linux
 - OpenVPN Connect adapter present (VPN capable)
- credentials.md present and populated
- Settings.json has permissions.defaultMode: bypassPermissions
+- SSH pubkey: `~/.ssh/id_ed25519.pub` (ed25519, generated 2026-04-26) -- needs deployment to infra servers
+- No D: drive -- vault cloned to C:/Users/guru/vault (not D:/vault)
--- a/.claude/memory/machine_windows_guru_setup_status.md
+++ b/.claude/memory/machine_windows_guru_setup_status.md
@@ -1,44 +1,53 @@
 ---
 name: Windows GURU-BEAST-ROG Setup Status
-description: Windows workstation setup completion status - Ollama, GrepAI, MCP, Node.js all configured
+description: Windows workstation setup completion status - fully configured except SSH key deployment to servers
 type: reference
 ---

 # Windows Machine Setup Status (GURU-BEAST-ROG)

 **Created:** 2026-03-23
-**Updated:** 2026-03-24
+**Updated:** 2026-04-26
 **Machine:** GURU-BEAST-ROG (Windows 11 Pro, i9-14900K, 128GB DDR5, RTX 4090)

 ## Software Status

-| Software | Version | Path | Status |
-|----------|---------|------|--------|
-| Python | 3.12.10 | system PATH | [OK] |
-| Git | 2.52.0.windows.1 | system PATH | [OK] |
-| Windows OpenSSH | system | C:\Windows\System32\OpenSSH\ssh.exe | [OK] |
-| Node.js | v24.14.0 | C:\Program Files\nodejs | [OK] |
-| Ollama | v0.18.2 | C:\Users\guru\AppData\Local\Programs\Ollama\ollama.exe | [OK] |
-| GrepAI | v0.35.0 | C:\Users\guru\ClaudeTools\grepai.exe | [OK] |
-| credentials.md | -- | repo root | [OK] |
+| Software | Version | Status |
+|----------|---------|--------|
+| Python | 3.12.10 | [OK] |
+| Git | 2.52.0.windows.1 | [OK] |
+| Windows OpenSSH | system | [OK] |
+| Node.js | v24.14.0 | [OK] |
+| Ollama | v0.21.0 | [OK] |
+| GrepAI | v0.35.0 | [OK] |
+| jq | 1.8.1 | [OK] |
+| sops | 3.12.2 | [OK] |
+| age | installed | [OK] |
+| 1Password CLI | 2.33.1 | [OK] |
+| Tailscale | installed | [OK] |

 ## Ollama Models

 | Model | Size | Status |
 |-------|------|--------|
-| nomic-embed-text | 274 MB | [OK] |
+| nomic-embed-text | 0.3 GB | [OK] |
 | qwen3:14b | 9.3 GB | [OK] |
-| codestral:22b | ~12 GB | [PENDING] - download interrupted, not pulled |
+| codestral:22b | 12.6 GB | [OK] |
+| qwen3:32b | 20.2 GB | [OK] |
+| gemma3:27b | 17.4 GB | [OK] |

 ## Configuration

- **.mcp.json:** filesystem, sequential-thinking, grepai servers configured
- **GrepAI:** Initialized, watcher configured, Ollama backend with nomic-embed-text
- **Bypass permissions:** `permissions.defaultMode: "bypassPermissions"` in ~/.claude/settings.json
- **In-repo memory:** .claude/memory/ (syncs via Gitea)
+- **identity.json:** configured (mike, GURU-BEAST-ROG)
+- **users.json:** GURU-BEAST-ROG registered in mike's known_machines
+- **Vault:** C:/Users/guru/vault (cloned, SOPS decryption working with shared age key)
+- **SOPS_AGE_KEY_FILE:** set in ~/.bashrc
+- **OP_SERVICE_ACCOUNT_TOKEN:** set in ~/.bashrc
+- **~/.claude/commands/:** synced from repo
+- **GrepAI:** watcher running, MCP server configured
+- **Bypass permissions:** defaultMode: bypassPermissions

-## Notes
+## Remaining TODO

- Ollama not in Git Bash PATH -- use full path or open new terminal
- GrepAI watcher may need restart after reboot: `./grepai.exe watch --background`
- Machine registered at `.claude/machines/guru-beast-rog.md`
+- [ ] Deploy SSH pubkey to infrastructure servers (OwnCloud, Jupiter, etc.)
+- [ ] Vault rotation to add GURU-BEAST-ROG's own age key as recipient (currently using shared ACG-5070 key)
--- a/.claude/users.json
+++ b/.claude/users.json
@@ -1,29 +1,36 @@
-{
-  "users": {
-    "mike": {
-      "full_name": "Mike Swanson",
-      "email": "mike@azcomputerguru.com",
-      "role": "admin",
-      "title": "President",
-      "known_machines": ["DESKTOP-0O8A1RL", "Mikes-MacBook-Air"],
-      "git_name": "Mike Swanson",
-      "git_email": "mike@azcomputerguru.com",
-      "notes": "Owner. Full access to everything."
-    },
-    "howard": {
-      "full_name": "Howard Enos",
-      "email": "howard@azcomputerguru.com",
-      "role": "tech",
-      "title": "Technician",
-      "known_machines": ["ACG-TECH03L", "Howard-Home"],
-      "git_name": "Howard Enos",
-      "git_email": "howard@azcomputerguru.com",
-      "gitea_username": "howard",
-      "notes": "Employee, Mike's brother. Full trust. Same access as Mike for MSP tracking and daily work. Has own Gitea account (howard) with admin access to all repos. Password rotated 2026-04-21 — stored in Howard's 1Password, not in this file."
-    }
-  },
-  "roles": {
-    "admin": "Full access to all systems, credentials, deployments, and infrastructure.",
-    "tech": "Full access to all systems, credentials, and client work. Same as admin for this organization."
-  }
-}
+{
+  "users": {
+    "mike": {
+      "full_name": "Mike Swanson",
+      "email": "mike@azcomputerguru.com",
+      "role": "admin",
+      "title": "President",
+      "known_machines": [
+        "DESKTOP-0O8A1RL",
+        "Mikes-MacBook-Air",
+        "GURU-BEAST-ROG"
+      ],
+      "git_name": "Mike Swanson",
+      "git_email": "mike@azcomputerguru.com",
+      "notes": "Owner. Full access to everything."
+    },
+    "howard": {
+      "full_name": "Howard Enos",
+      "email": "howard@azcomputerguru.com",
+      "role": "tech",
+      "title": "Technician",
+      "known_machines": [
+        "ACG-TECH03L",
+        "Howard-Home"
+      ],
+      "git_name": "Howard Enos",
+      "git_email": "howard@azcomputerguru.com",
+      "gitea_username": "howard",
+      "notes": "Employee, Mike's brother. Full trust. Same access as Mike for MSP tracking and daily work. Has own Gitea account (howard) with admin access to all repos. Password rotated 2026-04-21 \u00e2\u20ac\u201d stored in Howard's 1Password, not in this file."
+    }
+  },
+  "roles": {
+    "admin": "Full access to all systems, credentials, deployments, and infrastructure.",
+    "tech": "Full access to all systems, credentials, and client work. Same as admin for this organization."
+  }
+}