mw
ce99f58374
Record the Caddy reverse-proxy at /etc/caddy/ (14 *.localhost sites,
mkcert TLS, systemd caddy.service) as a manual override in
docs/tech/manual-overrides.md - no caddy Ansible role exists yet.
Add a 'Local Dev Services' section to docs/tech/stack.md listing all
*.localhost sites and useful Caddy commands.
New learning record docs/learnings/2026-07-06-caddy-onlyoffice-mcp-sse-
investigation.md: Caddy emits 'context canceled' SSE aborts (~1.5ms) on
onlyoffice.localhost/mcp -> localhost:3847. Upstream verified alive
(HTTP 406 to plain GET = expected). Handed off to GitLab issue
satware/mcp/onlyoffice#92 with 5 hypotheses, 7 tasks, and a proposed
flush_interval -1 + transport http { versions 1.1 } mitigation (not
applied yet to avoid masking root cause).
2.4 KiB
2.4 KiB
description, tags, last_updated
| description | tags | last_updated | |||
|---|---|---|---|---|---|
| Documentation of manual system changes that are not managed by Ansible, as required by the project constitution. |
|
2026-07-06 |
Manual System Overrides
This document tracks all persistent system changes implemented manually that are not (yet) managed via Ansible roles.
Principles
- Ansible First: Always prefer automation over manual overrides.
- Document Everything: Any manual change MUST be recorded here with rationale.
- Migrate to Code: Periodically review this list to identify candidates for Ansible migration.
Active Overrides
| Date | Change | Rationale | Ansible Status |
|---|---|---|---|
| 2026-07-06 | Caddy reverse-proxy + mkcert TLS at /etc/caddy/ (Caddyfile + conf.d/localhost-dev.conf + localhost{,-key}.pem) |
Local HTTPS dev for 14 *.localhost sites (mcp, artifacts, onlyoffice, demo.satware.com clone, 10 placeholders). Caddy runs as systemd caddy.service on port 443. NOT managed by this repo - no caddy Ansible role exists. The onlyoffice.localhost site (-> localhost:3847) is emitting context canceled SSE aborts; see docs/learnings/2026-07-06-caddy-onlyoffice-mcp-sse-investigation.md and GitLab issue satware/mcp/onlyoffice#92. |
Candidate for Ansible role (caddy + mkcert); defer until issue #92 resolves to avoid masking root cause |
| 2026-07-03 | Patched remmina-plugin-rdp.so in ~/.config/remmina/plugins/ |
Remmina 1.4.43 crashes (SIGSEGV) on Wayland when keymap is set in a profile. Built from ~/external/remmina/ fork with NULL check fix. Alt plugin dir loads before system plugin. MR !2757 submitted upstream. See docs/learnings/2026-07-03-remmina-wayland-crash-fix.md. |
Remove when upstream fix is released and packaged |
| 2026-06-17 | Discovered and deleted br_vm_internal bridge (10.10.2.0/24) |
Externally-created bridge, no NM config file, no VMs attached. Origin unknown — likely ad-hoc nmcli con add or manual brctl session (Jun 10). Traffic-shaping qdisc (htb) suggests prior VM network isolation attempt. Deleted via nmcli con delete + ip link delete. |
N/A (removed) |
| 2026-04-02 | Moved LLM models to /home/mw/models/ (SATA SSD) with symlinks |
Free root NVMe space (93%→87%, +25G freed) | Not yet |