~ / rigs / CaptainSpof / dafos

CaptainSpof/dafos

Here lies my shipwrecks. I mean fleet of hosts.

↗ GitHub ★ 0 other updated 7d ago personal setup Claude CodeCodex
share on X
ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
CONTEXT TAX · EVERY TURN
~2.1k tokens
Moderate · median rig: 2.3k · breakdown
GUARDRAILS
4/5
Blocks destructive commands · Protects secrets · No YOLO mode · Sandbox or ask-first rules · details

Copy this rig

# review before running: this installs third-party code
$ npx degit CaptainSpof/dafos/.claude ./rig-dafos  # inspect, then merge into .claude/

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ npx degit CaptainSpof/dafos/.claude/skills/dafos-add-service .claude/skills/dafos-add-service
$ npx degit CaptainSpof/dafos/.claude/skills/dafos-home-assistant .claude/skills/dafos-home-assistant
$ npx degit CaptainSpof/dafos/.claude/skills/dafos-rebuild .claude/skills/dafos-rebuild
$ npx degit CaptainSpof/dafos/.claude/skills/dafos-secrets .claude/skills/dafos-secrets

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "permissions": {
    "deny": [
      "Write(./secrets/**)",
      "Edit(./secrets/**)"
    ],
    "ask": [
      "Bash(git push:*)"
    ]
  }
}

Skills (4)

Hooks (1)

eventmatcherruns
PostToolUseEdit|Write"$CLAUDE_PROJECT_DIR"/.claude/hooks/format-changed-file.sh

Permissions

deny (2)
Write(./secrets/**)
Edit(./secrets/**)
ask (1)
Bash(git push:*)
allow (26)
mcp__nixos__nix
Bash(nix eval:*)
Bash(nix build:*)
Bash(nix flake metadata:*)
Bash(nix flake show:*)
Bash(nix flake check:*)
Bash(nix derivation show:*)
Bash(nix path-info:*)
Bash(nix why-depends:*)
Bash(nix search:*)
Bash(nix fmt:*)
Bash(nixos-option:*)
Bash(rg:*)
Bash(fd:*)
Bash(git status:*)
Bash(git diff:*)
Bash(git log:*)
Bash(git show:*)
Bash(git blame:*)
Bash(systemctl status:*)
Bash(systemctl list-units:*)
Bash(journalctl:*)
WebFetch(domain:github.com)
WebFetch(domain:search.nixos.org)
WebFetch(domain:wiki.nixos.org)
WebFetch(domain:home-manager-options.extranix.com)

Similar rigs

copied ✓