CaptainSpof/dafos
Here lies my shipwrecks. I mean fleet of hosts.
ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
GUARDRAILS
4/5
Blocks destructive commands · Protects secrets · No YOLO mode · Sandbox or ask-first rules · details
Copy this rig
# review before running: this installs third-party code
$ npx degit CaptainSpof/dafos/.claude ./rig-dafos # inspect, then merge into .claude/ MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit CaptainSpof/dafos/.claude/skills/dafos-add-service .claude/skills/dafos-add-service $ npx degit CaptainSpof/dafos/.claude/skills/dafos-home-assistant .claude/skills/dafos-home-assistant $ npx degit CaptainSpof/dafos/.claude/skills/dafos-rebuild .claude/skills/dafos-rebuild $ npx degit CaptainSpof/dafos/.claude/skills/dafos-secrets .claude/skills/dafos-secrets
Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.
{
"permissions": {
"deny": [
"Write(./secrets/**)",
"Edit(./secrets/**)"
],
"ask": [
"Bash(git push:*)"
]
}
} Skills (4)
Hooks (1)
| event | matcher | runs |
|---|---|---|
| PostToolUse | Edit|Write | "$CLAUDE_PROJECT_DIR"/.claude/hooks/format-changed-file.sh |
Permissions
deny (2)
Write(./secrets/**)
Edit(./secrets/**)
ask (1)
Bash(git push:*)
allow (26)
mcp__nixos__nix
Bash(nix eval:*)
Bash(nix build:*)
Bash(nix flake metadata:*)
Bash(nix flake show:*)
Bash(nix flake check:*)
Bash(nix derivation show:*)
Bash(nix path-info:*)
Bash(nix why-depends:*)
Bash(nix search:*)
Bash(nix fmt:*)
Bash(nixos-option:*)
Bash(rg:*)
Bash(fd:*)
Bash(git status:*)
Bash(git diff:*)
Bash(git log:*)
Bash(git show:*)
Bash(git blame:*)
Bash(systemctl status:*)
Bash(systemctl list-units:*)
Bash(journalctl:*)
WebFetch(domain:github.com)
WebFetch(domain:search.nixos.org)
WebFetch(domain:wiki.nixos.org)
WebFetch(domain:home-manager-options.extranix.com)
Similar rigs
ruvnet/ruflo
🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native
Fort Knox 35.3k tok ·
Donchitos/Claude-Code-Game-Studios
Turn Claude Code into a full game dev studio — 49 AI agents, 72 workflow skills, and a complete coordination system mirroring real studio hierarchy.
Fort Knox 11.6k tok ·
FlorianBruniaux/claude-code-ultimate-guide
The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
Fort Knox 33.8k tok ·
trailofbits/claude-code-config
Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits
Fort Knox 0 tok ·