- Add scripts/cleanup.sh for package cleanup (dry-run/apply modes) - Add scripts/nvidia-recovery.sh for broken GUI recovery - Update AGENTS.md with new script references - Change default editor from vim to nvim in bashrc Co-authored-by: Junie <junie@jetbrains.com>
1.8 KiB
1.8 KiB
AGENTS.md (mw-pfeddersheim-workstation)
Project Overview
This repository manages the infrastructure, configuration, and maintenance for Michael Wegener's primary workstation at satware AG (Pfeddersheim location). It uses Ansible for system configuration and shell scripts for maintenance.
Key Directories
ansible/: Configuration-as-Code via Ansible roles and playbooks.docs/: PARA-structured documentation (Product, ADR, Learnings, Tech).scripts/: Automation and maintenance scripts.config/: Templates for system configuration files.
Essential Commands
| Task | Command |
|---|---|
| Apply Configuration | ansible-playbook ansible/workstation.yml |
| System Maintenance | bash scripts/maintenance.sh |
| Package Cleanup (dry-run) | bash scripts/cleanup.sh --check |
| Package Cleanup (apply) | bash scripts/cleanup.sh --apply |
| NVIDIA Recovery (broken GUI) | bash scripts/nvidia-recovery.sh --apply |
| Post-recovery | Reboot required to restore GUI login |
| Verify Ansible | ansible-playbook ansible/workstation.yml --check |
Standards
- Baby Steps™: Small, verifiable changes (<200 LOC per commit).
- PARA Documentation: Keep documentation updated in the
docs/folder. - Zero-Trust: Secrets must be handled via Ansible Vault or environment variables.
Guardrails
- NEVER commit raw secrets to the repository.
- ALWAYS run Ansible with
--checkbefore applying changes. - NEVER modify system configuration directly if it can be managed via Ansible.
- Secrets Management: All secrets stored in Bitwarden (
bitwarden.jantec.xyz) and cached locally ingnome-keyring(D-Bus secrets service). Seedocs/product/passwords.mdfor details.
Rules Hierarchy
- Global rules:
Rules/ - Project rules:
.clinerules/ - Agent instructions:
AGENTS.md(this file)