From 1b8186f6b913aab4c76d57eeb7137b2c1a37d849 Mon Sep 17 00:00:00 2001 From: root Date: Tue, 8 Sep 2026 13:00:05 +0000 Subject: [PATCH] no-mistakes(document): docs: reword Tanko .122 SSH dependency claims in zulip-health --- scripts/zulip-monitor.sh | 10 +++++----- zulip-health.prose.md | 8 ++++---- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/scripts/zulip-monitor.sh b/scripts/zulip-monitor.sh index 207cc2b..e0c815c 100755 --- a/scripts/zulip-monitor.sh +++ b/scripts/zulip-monitor.sh @@ -67,11 +67,11 @@ else fi # ── Platform B: Tanko (DSH dsh-web on amdpve CT 112) ── -# Direct SSH to 192.168.68.122 is retired after the agent migrations. Tanko's -# Zulip gateway runs as the dsh-web systemd unit inside CT 112 on amdpve -# (192.168.68.15), reachable only via `pct exec`. The gateway binds -# 127.0.0.1:3080 loopback-only by design — a remote :3080 probe is refused and -# is NOT a fault. +# Direct SSH to 192.168.68.122 is not a dependency of this monitor — per-worker +# key availability varies — so probes run from the amdpve vantage via `pct exec`. +# Tanko's Zulip gateway runs as the dsh-web systemd unit inside CT 112 on amdpve +# (192.168.68.15). The gateway binds 127.0.0.1:3080 loopback-only by design — a +# remote :3080 probe is refused and is NOT a fault. TANKO_SVC=$(ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.15 \ "pct exec 112 -- systemctl is-active dsh-web" 2>/dev/null || true) [ -n "$TANKO_SVC" ] || TANKO_SVC="unknown" diff --git a/zulip-health.prose.md b/zulip-health.prose.md index a67cf04..3e200ce 100644 --- a/zulip-health.prose.md +++ b/zulip-health.prose.md @@ -18,7 +18,7 @@ Runs every 15 minutes in the background. Also triggers on session start. ## Requires - **Zulip API key** for `abiba-bot@chat.sysloggh.net` in `$ZULIP_API_KEY` -- **SSH access** to amdpve (192.168.68.15) for Tanko — CT 112 reached via `pct exec` only (no direct SSH to .122 after agent migrations); Mumuni (192.168.68.14, kagentz CT105 on minipve); and Agent Zero Docker host (192.168.68.14) +- **SSH access** to amdpve (192.168.68.15) for Tanko — CT 112 reached via `pct exec` (direct SSH to .122 is not a dependency of this contract: per-worker key availability varies); Mumuni (192.168.68.14, kagentz CT105 on minipve); and Agent Zero Docker host (192.168.68.14) - **PM2** on localhost for pi process management - **Network access** to `chat.sysloggh.net`, `localhost:9200` - **Write access** to `/root/zulip-health-monitor.log` and `/tmp/zulip-monitor-debounce` @@ -188,9 +188,9 @@ grep -a "Finalized\|Failed to finalize" /root/.pm2/logs/abiba-zulip-out.log | ta Tanko runs on DSH (DeepSeek Harness) — it no longer runs a Hermes gateway, so there is no `~/.hermes/gateway_state.json` on CT 112. Tanko's Zulip gateway runs as the `dsh-web` systemd unit inside **CT 112**, which resides on the **amdpve** -PVE host (**192.168.68.15**). Direct SSH to 192.168.68.122 is no longer a valid -vantage point after the agent migrations — reach CT 112 only via `pct exec` on -amdpve: +PVE host (**192.168.68.15**). Direct SSH to 192.168.68.122 is not a dependency +of this contract — per-worker key availability varies — so CT 112 probes run +from the amdpve vantage via `pct exec`: ```bash ssh root@192.168.68.15 "pct exec 112 -- "