d20a9d41e4be68630d15350718e833a07585875f
Pass-based encrypted-at-rest secret store live: - gpg key RSA 4096 (fpr 0CB0B019...4FE3F59E), no expiration - pass v1.7.4 at ~/.local/bin/pass (manual clone) - 5 entries: interns/ollama-cloud-api-key, gitea/admin-token, vds-kzntsv/full-env, kreknin/full-env, snolla-smtp/full-env - gpg-agent: pinentry-w32 + 30-day cache TTL - Wrapper ~/.local/bin/interns-mcp-launcher.sh — pass show → env → exec python -m interns_mcp.server - ~/.claude.json mcpServers.interns swapped to wrapper bash invocation - Cross-machine: OpeItcLoc03/password-store-private (private), 7 commits - Plaintext ~/.config/projects-secrets/ cleaned (5 secret files removed; README rewritten as pass-pattern marker) Acceptance: all 4 spec criteria met. Open follow-ups: - meeting-room dirty WIP (etap-1 edit unstaged) — user decision needed - setup-interns SKILL v0.5.0 — migrate phase 5/6 to pass+wrapper - New endpoints — pattern documented in projects-secrets/README.md Closes secrets-manager-adopt (admin agenda E.3); secrets-out-of-common + secrets-manager-adopt chain (E.1 → E.3) fully shipped this session. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
admin
Infrastructure agenda — VDS / NAS / recovery-host / OpenWRT + fault-tolerance roadmap.
See .wiki/overview.md for orientation.
Description
Languages
PowerShell
77.3%
Shell
22.7%