# Active Projects

Current in-flight work. Update at the end of each session.
Last updated: 2026-06-19

---

## Agent OS — Phase 3: infra-monitor skill (NEXT)

Phases 1 (NFS + mount) and 2 (identity interview) are complete.

**Phase 3 goal:** Docker container state monitoring + system resources. Complements Varys (HTTP reachability) — do not duplicate.

Pre-work before implementing:
- [ ] Update `skills/infra-monitor/skill.md` — container list is stale (references Flowise/Netbird, missing 20+ current services)
- [ ] Correct Ollama URL in skill.md: now `http://172.27.40.20:11434` (moved from 172.27.6.139 → 172.27.40.20)
- [ ] Decide implementation: Docker one-shot container (consistent with bran/varys pattern) vs host cron + shell script

Implementation tasks:
- [ ] Build infra-monitor (Docker container or shell script)
- [ ] Output: `/opt/sites/infra-monitor/index.html` + `/opt/agent-os/logs/infra-monitor/last-run.json`
- [ ] Wire Raven alert on critical findings
- [ ] Set up cron: hourly heartbeat (Docker + Ollama only) + daily 07:00 full digest

## Agent OS — Phase 4: Cron Scheduling (Pending Phase 3)
- [ ] Hourly heartbeat cron on 172.27.40.3
- [ ] Daily 07:00 full digest cron
- [ ] Notification channel: Raven (confirmed live at http://raven-notify:8400)

## Agent OS — Phase 5: Future Skills (Future)
- backup-monitor: extend Tarly with deeper TrueNAS integration
- Daily log digest: summarise /opt/agent-os/logs/ via Ollama

---

## Active Infrastructure Projects

| Project | Status | Next Step |
|---|---|---|
| **Monitoring** | bezhuis+mwp+coetzee alerts live | CPU/mem/WAN/ping Grafana rules pending |
| **OpenVPN S2S** | bezhuis/mwp/coetzee DONE | fwlaw pending |
| **Tarly Backup** | Hub working | bezhuis/mwp/coetzee API key fix (backup privilege) |
| **Directus CRM** | LIVE, 12 clients seeded | Manual data enrichment (contacts, renewals) |
| **InvenTree** | LIVE (testing) | SSL cert, production use |
| **Mailcow** | MAIL-1+2 done | Blocked on Mimecast (MAIL-3→9) |
| **Vexis** | nexum-private-customer-setup + office-install done | ESET/Evolve creds or standard-setup next |
| **Maester Phase 2** | Phase 1 live | Hermes narrative + .docx generation |

---

## Gitea SSH Key — DONE
Server remote switched from HTTP+token to SSH (`gitea-local:admin/agent-os.git`) on 2026-06-19.