ariffazil/FORGE-vps-docker
skills/_retired/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-vps-docker/SKILL.md
Runbook for VPS Docker operations — compose stack management, live service map, container lifecycle.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace FORGE-vps-dockerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 17, 2026, 3:33 AM132.8s1 file scanned
SKILL.md
- id:
- vps-docker-ops
- name:
- FORGE-vps-docker
- version:
- 1.0.0
- description:
- Runbook for VPS Docker operations — compose stack management, live service map, container lifecycle.
- owner:
- AAA
- risk_tier:
- medium
- floor_scope:
- [F1, F2, F8]
- autonomy_tier:
- T2
- tags:
- [docker, vps, runbook, ops, compose]
VPS Docker Operations
Stack Location
All Docker services run from: /root/compose/docker-compose.yml
Live Service Map (verified 2026-05-15)
arifosmcp :8080 (arifOS MCP — constitutional kernel)
geox_eic :8081 (GEOX — earth intelligence)
wealth-organ :8082 (WEALTH — capital intelligence)
well :8083 (WELL — vitality intelligence)
aaa-a2a :3001 (AAA — agent gateway)
hermes-agent :3002 (HERMES — ASI relay)
af-bridge-prod :7071 (A-FORGE — execution bridge)
vault999 :8100 (VAULT999 — immutable ledger)
vault999-writer :5001 (VAULT999 Writer — seal API)
postgres :5432 (PostgreSQL 16)
redis :6379 (Redis 7)
qdrant :6333 (Qdrant vector store)
ollama :11434 (Ollama LLM engine)
uptime-kuma :8086 (Uptime monitoring)
vaultwarden :8085 (Self-hosted password manager)
nats :4222 (NATS messaging)
netdata :19999 (Netdata system monitoring)
graphiti-mcp :8000 (Graphiti knowledge graph MCP)
Safe Operations (always run these)
Check all services
cd /root/compose && docker compose ps
Check one service health
docker inspect <service> --format '{{.State.Health.Status}}'
curl -sf http://localhost:<port>/health
View logs
docker compose -f /root/compose/docker-compose.yml logs --tail=100 <service>
docker compose -f /root/compose/docker-compose.yml logs -f <service> # live
Restart a service
docker compose -f /root/compose/docker-compose.yml restart <service>
docker compose -f /root/compose/docker-compose.yml up -d <service> # rebuild+restart
Restart entire stack
cd /root/compose && docker compose up -d --remove-orphans
Check resource usage
docker stats --no-stream --format "table {{.Name}}\t{{.CPUPerc}}\t{{.MemUsage}}"
docker system df
Validate config before deploy
cd /root/compose && docker compose config
Dangerous Operations (ask ARIF first)
Disk cleanup
docker builder prune -f
docker image prune -f
# NEVER: docker system prune -af --volumes (F1 — irreversible!)
Remove a container
docker rm -f <container> # data loss risk!
Remove a volume
docker volume rm <volume> # permanent data loss!
Emergency: Service keeps restarting
docker compose -f /root/compose/docker-compose.yml stop <service>
docker logs <service> --tail 200
# Fix the issue
docker compose -f /root/compose/docker-compose.yml up -d <service>
How to check what changed
docker diff <container> # files changed since container start
docker inspect <container> --format '{{json .Config}}' | python3 -m json.tool
Related Skills
ariffazil/openclaw
testing
VerifiedTrustedCommunity
OpenClaw edge agent bridge — operational triage, doctor, restart, and A2A bridge routing for the federation edge (Telegram surface). USE WHEN: "openclaw unhealthy", "gateway down", "edge bot not responding", "a2a bridge disconnected", "watchdog tripped", "openclaw doctor", "openclaw restart". NOT for token/security audit — use FORGE-telegram-audit.
2SKILL.mdUpdated Aug 8, 2026
ariffazil/MiniMax Image Generation
tools
VerifiedTrustedCommunity
Generate images, videos, TTS, voice clone, and music via MiniMax MCP server. Use when user asks to "draw", "generate image", "create picture", "make a photo", "text to image", "image generation".
2SKILL.mdUpdated Aug 8, 2026
ariffazil/arifos-constitutional-judge
testing
VerifiedTrustedCommunity
Single load-bearing constitutional-judgment skill. Routes all F1–F13, verdict, hold, seal, scope, authority and floor-check calls through the live arif_judge surface. Replaces 7 overlapping predecessors (arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge).
2SKILL.mdUpdated Aug 8, 2026
ariffazil/FORGE-lsp-pre-edit-gate
development
VerifiedTrustedCommunity
MANDATORY LSP grounding gate BEFORE any code mutation on .ts, .py, .js, .tsx, .jsx files. Forces the agent to read real-time compiler diagnostics and structural project context before editing — eliminating blind guesses and anchoring every mutation in F2 (TRUTH). Routes through arifOS kernel (:8088) for centralized gate logic.
2SKILL.mdUpdated Aug 8, 2026