getcolors/skills
Agent Network DigitalOcean Kubernetes
Verified traps and acceptance doctrine for NetBird Agent Network on DigitalOcean Kubernetes, distilled from a live DOKS build - platform-allocated subnets that are not the documented 10.244.0.0/16 default, DOCR's account-scoped adopt-or-create registries with registry-wide credentials, and the Ready-versus-gateway-reachable timing traps.
Agent Network Kubernetes
Verified traps and acceptance doctrine for NetBird Agent Network on Kubernetes, distilled from a live VKE build - the unprivileged netstack/SOCKS5 client the flags will not configure, the embedded proxy peer whose overlay address churns, and isolation probed from both sides of the listener.
Agent Network Single-Node
Verified traps, API contract, and acceptance doctrine for single-node NetBird Agent Network deployments, distilled from a live adversarially reviewed build.
AutoMQ Multi-Node
Verified traps, listener and SCRAM contract, storage-ownership rules, and acceptance doctrine for a multi-node AutoMQ cluster whose storage tier is object storage — including the two firewalls in front of every Vultr node and the genesis mistake that leaves a cluster unable to authenticate anyone.
ClickHouse Replicated
Verified topology, config.d traps, the s3_plain backup disk verified against system.backups, a collision-free restore beside the live database, application versus operator grants, the two firewalls on a Vultr VPC, and the replica-loss drill for three replicated ClickHouse nodes with embedded Keeper.
Langfuse Multi-Node
Verified topology, the Langfuse v4 events_only write-mode contract (OTLP in, Observations API v2 out, events_full in ClickHouse), the Prisma P3005 trap a Neon-provisioned database springs, ClickHouse cluster and s3_plain backup traps, the restore-time pairing rule, and a rehearsed restore-and-boot for self-hosted Langfuse on six machines.
n8n Single-Node
The n8n 2.x keys and defaults every guide still gets wrong, the encryption key n8n persists on first boot, the API that redacts credential values so decryption can only be proven by using them, and an acceptance doctrine written after a converge reported success with zero gates executed.
Neon Single-Node
Verified topology, compute-spec auth contract, Cloudflare R2 remote-storage traps, honestly measured single-node RPO, and rehearsed recovery doctrine for self-hosted Neon serverless Postgres on one machine.
PostHog Single-Node
Verified ten-container topology, ClickHouse Keeper and named-collections configuration, converge ordering, and a ~30-entry failure catalogue for self-hosted single-node PostHog.
Redis Single-Node
Verified exposure doctrine, redis-cli gate contract, RDB backup-set protocol, and the AOF-off restore rehearsal for a single-node Redis 7 on Docker Compose with backups in Cloudflare R2.
Rybbit Single-Node
Verified six-container topology, provider-independent converge seam, restore-proven ClickHouse backups, and a 30-entry failure catalogue for self-hosted single-node Rybbit analytics.