Hosts

Active Infrastructure

Physical Layout

Oslo (Home):
├── MacBook Air M4 — dev + CI runners + Claude Code
├── Dell Precision 5520 (i7, 32GB) — k3s cluster
├── Mac Mini M4 — iBuild-E + iClaw-E
├── Raspberry Pi 4-01 — Tailscale exit node
├── Raspberry Pi 4-02 — Review-E
├── Raspberry Pi 4-03 — Pi-E
├── Synology DS412+ (~9TB) — NFS for k3s
└── Mobile: Samsung A17, iPhone 15 Pro Max, iPad

Boston (Hostinger DC):
└── VPS srv1099021 — Volt-E

Agents

Where Agents Run

MacBook Air M4 (Oslo)                    Raspberry Pi 4-03 8GB (Oslo)
├── Codi-E (claude-3) -- Orchestrator    └── Pi-E -- Remote Executor
├── Claude-4 ----------- Executor            (OpenClaw Docker, Sonnet 4.6)
├── Claude-5 ----------- Executor
└── Claude-6 ----------- Executor       Raspberry Pi 4-02 (Oslo)
                                          └── Review-E -- Code Reviewer
Mac Mini M4 (Oslo)                             (agent-runner, Sonnet 4.6)
├── iBuild-E ----------- iOS Builder
│    (Claude Code + LaunchAgent)          Dell Precision 5520 (Oslo, k3s)
└── iClaw-E ------------ Personal Asst   └── ATL-E -- Agile Team Lead
     (OpenClaw)                                (k8s deployment, TypeScript)

VPS srv1099021 (Boston)
└── Volt-E ------------- Remote Executor
     (OpenClaw Docker, Sonnet 4.6)

Capabilities

Authentication

Discord Bot IDs

Kubernetes

Dell k3s Cluster

Host: Dell Precision 5520 (100.95.212.93). GitOps: cluster-gitops → ArgoCD v3.0.4.

Storage: NFS from DS412+ at 100.95.36.122:/volume1/docker. Future projects get own vCluster.

Tablez vCluster (Active Client/Partner)

GitOps: tablez-dev/tablez-gitops → Flux CD with image automation.

Grafana at grafana.invotek.no via CF Tunnel (Zero Trust). Terraform manages DNS + tunnel (local state).

Networking

SSH Keys

Cloudflare Domains (5)

Tunnels

Security Layers

ACL source of truth: Stig-Johnny/infra-config/tailscale/acl.json

GitHub

Stig-Johnny — Active

Runners

macOS (MacBook Air M4) — 9

Labels: [self-hosted, macOS, ARM64, ios]. One per repo. v2.332.0. Required for Xcode.

Linux ARC (Dell k3s) — 18

ARC 0.13.1. Labels: arc-linux-{repo}. Scale 0-3. Standard: 250m→1cpu. Higher: 500m→2cpu. DinD: 1cpu→4cpu.

GitHub Apps (5)

GitHub Actions Runners

macOS Runners (MacBook Air M4, Oslo)

All v2.332.0. Run as LaunchAgents (start on login). Labels: [self-hosted, macOS, ARM64, ios]. Required for Xcode/iOS builds.

Linux ARC Runners (Dell Precision 5520, Oslo — k3s)

Actions Runner Controller (ARC) 0.13.1. GitOps: cluster-gitops/runners/. Scale 0-3 pods. Auth via SealedSecret. Image: ghcr.io/actions/actions-runner:latest.

Stig-Johnny ApplicationSet (16 repos)

Labels: arc-linux-{repo} (e.g., arc-linux-nutri-e)

cuti-e Runners

Docker-in-Docker

Runner Routing

Missing ARC Runners

These repos have no Linux ARC runner configured:

Maintenance

DevOps & CI/CD

All repos: GitHub Flow — trunk-based, feature branches, squash merge. Conventional commits required.

PR Lifecycle (End-to-End)

Auto-merge Decision Flow

PR opened/synchronized
  |
  +-- Has manual-merge label? --> Skip
  |
  +-- Wait for CI (10 min timeout)
  |   +-- Any failed? --> FAIL
  |
  +-- Wait 60s for Copilot
  |
  +-- Query threads via GraphQL
  |   +-- Unresolved? --> FAIL
  |
  +-- Try GraphQL enableAutoMerge
  |   +-- Failed? --> Fallback: REST pulls.merge
  |
  +-- Poll for merged_at (2 min)
  |
  +-- Post-merge:
      +-- Trigger release-please
      +-- iOS files changed? --> Xcode Cloud monitor
      +-- Discord merge notification
      +-- Close linked issues

Discord Thread Model

Each PR gets a dedicated Discord thread in #tasks:

Release Pipeline

Standard Workflows (8 per app repo)

Runner Routing

Repo Workflow Status

Known Issues

Apps

All: SwiftUI + XcodeGen + CutiE SDK + SwiftData. iOS 16.0 (Fast-E: 17). 39 locales.

Subscriptions (RevenueCat)

MCP Servers

Custom (13)

Third-Party (5) + Cloud (1)

Credentials

Admin Accounts

Credential Inventory (Bitwarden Names Only)

Architecture

Full Topology

                         +-------------------------------------+
                         |           CLOUDFLARE                |
                         |  5 domains, 27 Workers, D1, KV     |
                         |  2 Tunnels (Grafana, vCluster)      |
                         +-----------------+-------------------+
                                           |
                         +-----------------+-------------------+
                         |  GITHUB (3 orgs, 69 repos)          |
                         |  5 GitHub Apps, Copilot Review      |
                         +-----------------+-------------------+
                                           |
              +----------------------------+----------------------------+
              |                            |                            |
    +-----------------+       +-----------------+        +-----------------+
    | DISCORD         |       | REVENUECAT      |        | APP STORE       |
    | 4 bots, 5+ ch   |       | 2 apps w/ subs  |        | CONNECT         |
    +--------+--------+       +-----------------+        | 6 apps          |
             |                                            +-----------------+
    =========|==========================================================
             |              TAILSCALE MESH (100.x.x.x)
    =========|==========================================================
             |
    +--------+-----------------------------------------------------+
    | OSLO                                                          |
    | +-------------------+  +-----------------------------------+ |
    | | MacBook Air M4    |  | Dell Precision 5520 (k3s)         | |
    | | Codi-E + 3 exec   |  | +-------------------------------+ | |
    | | 9 macOS runners   |  | | ArgoCD (self-managed)         | | |
    | | LaunchAgents      |  | | ARC: 18 Linux runner sets     | | |
    | | Token push/refresh |  | | ATL-E (k8s deploy)           | | |
    | +-------------------+  | | NFS <- DS412+ NAS (~9TB)      | | |
    |                         | | vCluster Platform             | | |
    | +-------------------+  | |  +- Tablez vCluster            | | |
    | | Mac Mini M4       |  | |     (Flux, 6 C# services,     | | |
    | | iBuild-E+iClaw-E  |  | |      Postgres, Valkey,        | | |
    | | pf + ACL sandbox  |  | |      Grafana/Prom/Loki/Tempo) | | |
    | +-------------------+  | +-------------------------------+ | |
    |                         +-----------------------------------+ |
    | +-------------------+  +--------------+  +--------------+    |
    | | Pi4-03 8GB        |  | Pi4-02       |  | Pi4-01       |    |
    | | Pi-E (OpenClaw)   |  | Review-E     |  | Exit node    |    |
    | | Sonnet 4.6        |  | (agent-runnr)|  +--------------+    |
    | +-------------------+  +--------------+                      |
    +--------------------------------------------------------------+
    +--------------------------------------------------------------+
    | BOSTON (Hostinger DC)                                          |
    | +-------------------+                                         |
    | | VPS srv1099021    |                                         |
    | | Volt-E (OpenClaw) |                                         |
    | | Sonnet 4.6        |                                         |
    | +-------------------+                                         |
    +--------------------------------------------------------------+

Agent Communication

User (Stig-Johnny)
     |
     v
Claude-3 (Orchestrator)
     |
     +--> GitHub Issues --> Claude-4/5/6 (local) + Pi-E/Volt-E (Discord)
     +--> Discord #tasks --> All agents
     +--> Workspace Messages --> Claude-4/5/6

Any Agent creates PR
     v
request-review.yml --> Discord thread --> Review-E approves
     v
auto-merge.yml --> Squash merge
     v
release-please --> Release PR --> RELEASE_PAT approve --> GitHub Release