6e2f80e18e
- migration-plan.md: workstation-only migration of nh3-dev's dev env to the M2 Ultra Mac Pro Rack (on-subnet, sidecars stay on Linux). - nh3-dev README: drop volva from live sidecars + add retired note. volva.service/heid.service removed by infra-ops at heid's request (re-architected daemon->CC-orchestrator; volva.service was crash-looping).
nh3-dev
NH3-site developer box — 10.100.10.50 (WireGuard-reachable from the NH3
subnet). General-purpose dev VM that hosts agent-fleet sidecars and live Claude
Code sessions; not a Docker-stack host in the stacks/ sense.
Reach: ssh 10.100.10.50 (as lkraven), or the dedicated agent identity
ssh -i ~/.ssh/infra-ops_ed25519 infra-ops@10.100.10.50 (NOPASSWD sudo).
infra-ops bootstrapped here 2026-06-04 (see [reference_infra_ops_sudo_identity]
in auto-memory). Note: Claude Code sessions often run natively on this box, so
local Bash already executes here — no SSH-to-self needed for non-privileged work.
What runs here
- NH3 egress proxy — durable internal-only SOCKS5
socks5h://10.100.10.50:1080(dante, ACL'd to the WG net). Residential egress for colo services gated on their datacenter IP (e.g. YouTube bot-gate). Runbook + setup committed; consumers point*_PROXYat it. - ttyd fleet driver-seat — web/iPad seat into the zellij
Claudesession (ttyd behind Caddy; OSC52 clipboard shim). User systemd services under~/.config. - mead-hall — Bifrost tool-provider sidecar (
:5173), CI-deployed fromvh/mead-hall. - bloom_music dev —
~/development/bloom_music; itsweb/test harness uses Playwright headless Chromium for OSMD browser-geometry assertions.
Box-wide Playwright / Chromium (2026-06-04)
Available to every user/project on this box — no per-home playwright install:
- System shared-libs: apt-installed via
playwright install-deps chromium(Debian-12 set + xvfb), global. - Browser binaries: shared
/opt/ms-playwright(chromium-1223 + headless-shell + ffmpeg), root-owned, world-readable. Installed viainfra-ops. - Discovery:
PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwrightset globally in/etc/environment(PAM/all sessions) +/etc/profile.d/playwright-browsers.sh(login shells). A project justnpm i playwright(skip-browser-download is fine) and resolves the shared binary; verified launching headless from/optas a normal user. - To add more browsers / bump:
ssh infra-ops@10.100.10.50 'sudo env PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright npx -y playwright install <browser>'.
Notes
- PFI-owned Linux — in scope for
infra-opsmanagement (apt, systemctl, service lifecycle). Added to the fleet bootstrap's Tier 1. - OS: Debian 12 (bookworm). See
system-details.txtfor the latest snapshot (scripts/refresh-server-info.sh nh3-dev). - Not in the colo Docker-stack topology — no
/opt/docker/composedeploy target; workloads are systemd services + dev checkouts. - Retired (2026-06-08):
volva.service+heid.serviceuser systemd units removed. Heid/Volva were re-architected from Python systemd daemons (volva run/heid runpollers) into Claude Code session orchestrators (heid commit12aa5a9); the~/development/volvadir + venvs are gone.volva.servicehad been crash-looping203/EXEC. Cleanup done by infra-ops at heid's request.