feat(albok): /srv/nemi/vault, a pulled clone of Prime's notes (vh/VuongKB) for Nemi's vault source (gate 1)

Prime keeps his notes at /home/lkraven/kb and syncs them with git (gitea
vh/VuongKB), so Nemi's read-only copy is a fresh clone, pulled fast-forward-only
hourly at :50 by a lkraven user timer, ahead of the ~:01 walk. As a clone it
holds only tracked notes (129 md outside dot-dirs). The untracked Muninn
output in the working copy (main/, fiction/) stays out. Readable from
lkraven's user manager, where Nemi runs.
This commit is contained in:
vh
2026-10-15 01:40:02 -07:00
parent dd816662dc
commit db88f76aea
4 changed files with 29 additions and 1 deletions
@@ -0,0 +1,9 @@
# eshpfi configs/nemi-vault (infra-ops, 2026-10-14): keeps /srv/nemi/vault, the read-only copy of Prime's notes
# (gitea vh/VuongKB, which he syncs with git), current for Nemi's `vault` source (albok unit 4.4 ruling 6).
# A lkraven USER unit: the clone uses lkraven's gitea SSH key. Fast-forward only: the copy is never written to,
# so a non-ff (a force-push upstream) fails loudly here instead of being papered over.
[Unit]
Description=Pull Prime's notes (vh/VuongKB) into /srv/nemi/vault for Nemi
[Service]
Type=oneshot
ExecStart=/usr/bin/git -C /srv/nemi/vault pull --ff-only --quiet