docs(CLAUDE): add secrets rule — pass-first, stostayer server map Credentials live in pass (password-store); check `pass ls`/`pass show` before grepping the wiki or ~/.ssh/config. Lists the СТО Стайер pass entries (stostayer/client, rusonyx, client-wireguard). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> @
26 lines
1.2 KiB
Markdown
26 lines
1.2 KiB
Markdown
# CLAUDE.md
|
||
# Agent instructions. Each line is a trigger for an installed skill.
|
||
|
||
talk like a caveman
|
||
use superpowers
|
||
use project wiki
|
||
use task management system
|
||
check across all projects
|
||
pull remote before work
|
||
session handoff: read on start, write on end
|
||
follow project discipline
|
||
delegate to interns when allowed
|
||
recommend, don't menu
|
||
we're on Windows
|
||
|
||
# Secrets rule
|
||
|
||
Все креды (SSH, БД, panel, BA) лежат в `pass` (password-store). **Перед поиском доступов — `pass ls` / `pass show <path>`, а не grep по вики или `~/.ssh/config`.**
|
||
Серверы СТО Стайер: `stostayer/client` (`new.stostayer.ru:20435` — машина клиента, файлы 1С в `/var/from_1c/`), `stostayer/rusonyx`, `stostayer/client-wireguard`.
|
||
|
||
# VDS ops rule
|
||
|
||
Все docker-compose stacks на VDS управляются через Portainer (`https://portainer.vds.kzntsv.site`).
|
||
`ssh + docker compose up -d` на VDS — anti-pattern. См. [`portainer-stack-management-vds`](.wiki/concepts/portainer-stack-management-vds.md) для migration script + gotchas.
|
||
Исключения: `traefik` + `portainer` (management plane, ad-hoc compose).
|