vh
838132cd6b
Session captured: the FV outbound-NAT root cause and its diagnostic signature, the fv-ml1 dead man's switch, fleet identity/group/path conventions and the root:docker normalization, nh3-dev's ts-input reachability fix, ESPHome modernisation and the kb KB-search tool, and the Hermes bearer rotation release. Six new detail files. Tried-and-abandoned gains three: probing OPNsense endpoints by POSTing at them (which rebooted the FV firewall), advertising a /32 from nh3-dev, and the nh3-scale remote-site masquerade rules that fired but were not the fix. Housekeeping: 8 Recent-decisions entries archived to archival-memory.md, and 21 oversized inline entries split into detail files per the two-tier rule -- they had been sitting fully inline in the index, which is what the split exists to prevent. Two pointers to a detail file archived this run were repointed at archival-memory.md. The index is 389 lines, still over the ~300 soft cap. The archival guards stop it there: only 4 further entries are old enough to move and every one carries an open deferred-work pointer. An over-cap file that keeps live decisions beats a scannable one that lost a deferred call.
1.3 KiB
[2026-09-08] yt-voice-clipper back UP
yt-voice-clipper back UP — dead since the 09-06 danted retirement (every job failed at yt-dlp, bot-gated on the Irvine datacenter IP). Fix: danted on nh3-scale (CT107) at socks5h://100.64.0.1:1080, fleet-ACL'd, residential egress 70.230.226.88 measured; YTVC_PROXY repointed, worker recreated, end-to-end job DONE with positive (proxied) + negative (direct = bot-gate) controls. Homepage card href/siteMonitor → irv-ml1.nh3.internal:8000 (was dead wg0 IP). Then a SECOND fault: full downloads 403'd through the proxy (cookies irrelevant) = stale yt-dlp 2026.07.04 from a cached Dockerfile layer → compose build --no-cache api (2026.08.19), which dragged in a whisperx/nltk that needs punkt_tab → staged on the data volume + NLTK_DATA in the override. Operator's video x7kWJojf1MI → done, 8 clips. yt-voice-clipper-dev shipped both Dockerfile fixes + CrisperWhisper 2.0 (v0.3.6, b62849d) — deployed and verified (12 clips, [UM]/[UH] tags). ⚠ The gitea push webhook had been targeting the dead wg0 IP since 09-06 (never fired) → repointed to 10.6.110.50:9008 with the HMAC secret re-applied; deploy script passes YTDLP_REFRESH. Script scripts/setup-nh3-scale-socks-egress.sh. → auto-memory reference_nh3_egress_proxy, reference_ytvc_autodeploy.