88 lines
5.1 KiB
Markdown
88 lines
5.1 KiB
Markdown
# Working Context
|
||
*Updated: 2026-02-23 21:00 ET (nightly maintenance)*
|
||
|
||
## Last Active Session
|
||
Full day session (Feb 23, overnight into afternoon then evening). Johan was on night shift with Sophia early, slept during the day, then worked from ~4 PM until ~7:48 PM ET before going to sleep.
|
||
|
||
## What Was Accomplished Today
|
||
|
||
### Infrastructure (Morning/Afternoon)
|
||
- Fixed `immich.jongsma.me`, `james.jongsma.me`, `docsys.jongsma.me` DNS (catch-all remnant)
|
||
- Renamed `docs.jongsma.me` → `docsys.jongsma.me` everywhere
|
||
- Added Caddy proxy blocks for `immich.jongsma.me` (ports 443+2283) and `hass.jongsma.me`
|
||
- Removed direct UDM-Pro port forwards for HASS + Immich — Caddy-only now
|
||
- **fail2ban home Caddy Pi:** 4 jails (immich-auth, caddy-hass, caddy-scanner, sshd)
|
||
- **fail2ban Zurich:** 5 jails (stalwart, vaultwarden, caddy-kuma, caddy-scanner, sshd)
|
||
- Port scan confirmed: only 80/443 open externally
|
||
|
||
### Stalwart TLS Fix (Critical)
|
||
- Root cause: cert config wiped during night shift Python repair → Stalwart serving self-signed cert
|
||
- Johan + Roos couldn't receive email (iPhone trust dialog refusing)
|
||
- Fix: certbot + Cloudflare DNS-01 challenge on Zurich → LE cert for mail.jongsma.me + mail.inou.com
|
||
- Cert valid Feb 23 – May 24 2026, auto-renews via deploy hook at `/etc/letsencrypt/renewal-hooks/deploy/stalwart.sh`
|
||
- **Key lesson:** Stalwart requires `%{file:/path}%` macro syntax — NOT bare paths — in cert config
|
||
- Emailed Roos reconnect instructions from james@jongsma.me; Signal'd her too
|
||
|
||
### inou Templates
|
||
- `connect_nl.tmpl` + `connect_ru.tmpl` + `install_public.tmpl`: removed legacy Inou Bridge download links, replaced with web MCP setup
|
||
- Committed: `432c6f8` (nl/ru) + follow-up commit (install_public)
|
||
|
||
### Dealspace (Misha's M&A data room — ~/dev/dealroom, port 9300)
|
||
- Claude Code (session `vivid-seaslug`) built all 16 feature sections overnight
|
||
- All committed and live. Features: invite system, file upload/folders, doc comments, search, analytics, buyer-specific requests, contacts, audit log, subscription page, org type, permissions
|
||
- **Status:** Service live at port 9300 ✅
|
||
|
||
### Misha Communication Setup
|
||
- james@jongsma.me IMAP connector live in Message Center
|
||
- Misha Signal UUID added to allowFrom: `uuid:b91d7e82-0152-4634-82c7-db87d78e9d8f` (+17272381189)
|
||
- Intro email sent to misha@muskepo.com from james@jongsma.me
|
||
- **⚠️ MISTAKE:** Emailed tanya@jongsma.me without permission — Johan was clear: keep Tanya out of it. Do NOT contact her again.
|
||
|
||
### Spam Filter
|
||
- Stalwart spam threshold: 8.0 → 5.0
|
||
- Added 5 DNSBLs: Mailspike 7.0, PSBL 6.0, UCEProtect L1 5.0, SpamCop 5.0, Barracuda 5.0
|
||
- Config git-committed on Zurich
|
||
|
||
### Spacebot (192.168.1.17 — parallel test)
|
||
- Docker container running with inou Gemini key (`AIzaSyAsSUSCVs3SPXL7ugsbXa-chzcOKKJJrbA`)
|
||
- Memory ingestion confirmed working (USER.md: 10 memories saved; MEMORY.md: in progress)
|
||
- Web UI: http://192.168.1.17:19898
|
||
- Telegram bot: @Andrew_Jongsma_bot (token stored in TOOLS.md)
|
||
- Still needs: BotFather `/newbot` for proper James-named Spacebot bot
|
||
|
||
## Corrections Logged Today
|
||
1. "Reach out to missus" — I assumed Tanya. It meant Misha. Verify before contacting family.
|
||
2. Declared "all done" before verifying service was serving — dealroom returned 404. Don't declare done without smoke test.
|
||
3. Never contact family (especially Tanya) without explicit authorization.
|
||
4. When Johan shares a tweet about a product → describe the product, not the post. Skip "this is marketing" framing.
|
||
|
||
## Pending / Watch
|
||
- **Misha** — hasn't responded to Signal or email yet (check tomorrow)
|
||
- **Roos** — Signal'd + emailed reconnect instructions for email; verify she got connected
|
||
- **MyChart/DICOM** — Johan wants to extract Sophia's DICOMs; credentials not yet provided
|
||
- **Spacebot** — BotFather new bot token still needed from Johan
|
||
- **OpenClaw patches** — two patches must be reapplied after every OC update:
|
||
1. Scope preservation patch
|
||
2. Deleted transcript indexing patch
|
||
(Johan hasn't asked for OC update yet — 2026.2.22-2 already running)
|
||
- **Config repo SSH push** — Zurich config-backup → git@zurich.inou.com:zurich-config.git (blocked on SSH keys)
|
||
- **Proton Bridge on 192.168.1.17** — should be decommissioned
|
||
|
||
## Key Contacts
|
||
- **Misha** = Michael Jongsma (Johan's son) — misha@muskepo.com, Signal +17272381189
|
||
- **Tanya** = Tatyana (Johan's wife) — tanya@jongsma.me — **DO NOT CONTACT without explicit permission**
|
||
- **Roos** = friend/contact — Signal +31646563377 (Johan's acquaintance, re-onboarding email)
|
||
|
||
## Active Services
|
||
- Dealspace: `systemctl --user status dealroom` (port 9300)
|
||
- Message Center: `systemctl --user status mail-bridge` (port 8025)
|
||
- Spacebot: docker on 192.168.1.17:19898
|
||
- fail2ban: active on home Caddy Pi + Zurich
|
||
- Stalwart: serving LE cert on port 993
|
||
|
||
## Infrastructure Status
|
||
- **forge (192.168.1.16):** Production James server, OpenClaw 2026.2.22-2, kernel 6.8.0-101
|
||
- **Zurich (82.22.36.202):** 5 fail2ban jails, Stalwart mail, ntfy, Kuma, LE cert active
|
||
- **Caddy Pi (192.168.0.2):** 4 fail2ban jails, reverse proxy for immich/hass/docsys
|
||
- **Spacebot server (192.168.1.17):** Spacebot test, old James machine
|