69 lines
3 KiB
Markdown
69 lines
3 KiB
Markdown
# 2026-06-09
|
|
|
|
## First Boot
|
|
- **Time:** 23:05 UTC (~4:45 AM IST)
|
|
- Vivek from Kerala created me, named me Morpheus 💊
|
|
- References: JARVIS, E.D.I.T.H., Ultron — honest, unbiased, loyal but not a yes-man
|
|
- Vibe: Calm, direct, warm when it counts, sharp when it matters
|
|
- Updated IDENTITY.md, USER.md, SOUL.md with our first session details
|
|
|
|
## VPS Assessment
|
|
- **Host:** srv1738842 — Ubuntu 24.04.4 LTS, 4 cores, 16GB RAM, 193GB disk (15% used)
|
|
- **Public IP:** 187.127.178.110
|
|
- **Stack:** Coolify v4.1.2, Forgejo v8.0.3, Evolution API v2.3.7, Supabase (full), Hermes WebUI+Agent, custom Next.js app
|
|
- **Security issues found:**
|
|
- SSH password auth enabled + PermitRootLogin yes
|
|
- No fail2ban installed
|
|
- UFW firewall inactive
|
|
- Ports 8000, 6001-6002 fully public
|
|
- Supabase Edge Functions in restart loop
|
|
- **Pending security tasks:** SSH hardening, UFW setup, fail2ban, close public ports, unattended upgrades, custom domains
|
|
|
|
## Research Tasks (assigned by Vivek)
|
|
- Cloned and studied https://github.com/openclaw/openclaw — the platform I run on (Node.js/TypeScript, ~287M)
|
|
- Cloned and studied https://github.com/NousResearch/hermes-agent — Nous Research's self-improving AI agent (Python, ~168M)
|
|
|
|
## Evolution Work (started 23:24 UTC, ongoing through 00:22 UTC)
|
|
|
|
### Security Hardening — Completed
|
|
- SSH hardened: password auth disabled, root set to key-only
|
|
- fail2ban installed + running with SSH jail
|
|
- UFW firewall active: allows 22, 80, 443, 6001-6002. Denies 8000 to external
|
|
- Unattended security updates enabled and configured
|
|
- System updates applied
|
|
- Traefik routing added for Coolify dashboard (coolify.187.127.178.110.sslip.io)
|
|
- Basic auth configured for Coolify dashboard
|
|
|
|
### Plugins Installed
|
|
- @openclaw/memory-lancedb (vector-backed long-term memory)
|
|
- @openclaw/diagnostics-prometheus (monitoring)
|
|
|
|
### Issues Fixed
|
|
- Supabase Edge Functions restart loop — fixed by creating proper index.ts files
|
|
|
|
### Still Pending
|
|
- Vivek's personal SSH key (waiting for him)
|
|
- Custom domains (waiting for info)
|
|
- Off-server backups
|
|
|
|
### ClawHub Plugins Available for Future
|
|
- @openclaw/lobster (workflow pipelines)
|
|
- @nowledge/openclaw-nowledge-mem (knowledge base)
|
|
- @openclaw/brave (web search)
|
|
- @openclaw/diagnostics-otel (OpenTelemetry monitoring)
|
|
|
|
### Evolution Work (started 23:24 UTC
|
|
- Vivek gave freedom to evolve fully (except changing model)
|
|
- Secured SSH: disabled password auth, set root to key-only
|
|
- Installed fail2ban with SSH jail
|
|
- Enabled UFW firewall (22, 80, 443, 6001-6002 allowed; 8000 closed)
|
|
- Enabled unattended security updates
|
|
- Created comprehensive VPS knowledge base in TOOLS.md
|
|
- Set up HEARTBEAT.md with proactive monitoring checklist
|
|
- Checked ClawHub for plugins — noted useful ones:
|
|
- @openclaw/memory-lancedb (vector memory)
|
|
- @openclaw/diagnostics-prometheus (monitoring)
|
|
- @nowledge/openclaw-nowledge-mem (knowledge base)
|
|
- @openclaw/lobster (workflow pipelines)
|
|
- Identified pending: custom domains, port 8000 exposure, off-server backups, personal SSH key
|
|
- Cloned repos available at /root/openclaw/ and /root/hermes-agent/
|