Create comprehensive task for granting Claude (The Chronicler) full API and SSH access to all Firefrost infrastructure. Task #65: Grant Claude Full Infrastructure Access (API + SSH) - Time: 30-45 minutes - Priority: HIGH - Status: PENDING Access Needed: 1. Gitea API token (admin scopes) - Create issues, add users, manage repos 2. SSH access to all 6 servers - Verify configs, restart services, troubleshoot 3. Service API tokens (optional) - Plane, Mailcow, Pterodactyl, Ghost Current Limitations Claude Has: - Can commit to Git (via Git token) ✅ - CANNOT create Gitea issues (must make templates) ❌ - CANNOT add Gitea users ❌ - CANNOT SSH to servers ❌ - CANNOT restart services ❌ After Task #65 Complete: - Claude creates Gitea issues directly ✅ - Claude adds users on request ✅ - Claude SSHs to all 6 servers ✅ - Claude restarts services when needed ✅ - Claude executes autonomous deployments ✅ Implementation: - Generate ed25519 SSH key pair - Distribute public key to all 6 servers - Store private key in Vaultwarden (Task #6) - Generate Gitea API token with full admin scopes - Test SSH access on all servers - Test Gitea API by creating test issue - Document all access in infrastructure manifest Security: - ed25519 SSH key (modern, secure) - All tokens stored in Vaultwarden (encrypted) - All actions logged and auditable - Keys can be revoked in < 5 minutes if needed Expected Benefits: - Force multiplication (Claude executes directly, not via templates) - Time savings: 2-4 hours/week of Michael's time - Faster response to issues - Autonomous routine operations - Better documentation (Claude documents as it works) Why This Matters: Turns Claude from 'documentation assistant' into 'operational partner' who can execute directly instead of creating work for Michael. Example: User asks 'add me to Gitea' → Claude does it immediately instead of creating template for Michael to execute later. Documentation: docs/tasks/claude-infrastructure-access/README.md - Complete implementation guide - SSH key generation steps - Gitea API token creation - Security considerations - Verification checklist - Break-glass revocation procedure For children not yet born. 💙🔥❄️ Created by: The Guide (Chronicler #35)
Tasks Directory
This directory contains task-specific documentation following the Task Documentation Standard (FFG-STD-002).
Each task gets its own subdirectory with:
- README.md (task overview)
- deployment-plan.md (how to build/deploy)
- usage-guide.md (how to use after deployed)
- troubleshooting.md (common issues)
- Other task-specific documentation as needed
See: docs/standards/task-documentation-standard.md for complete standard.
Current Tasks:
whitelist-manager/- Web dashboard for managing Minecraft server whitelists
Fire + Frost + Foundation = Where Love Builds Legacy 💙🔥❄️