Private Gitea behind a TLS reverse proxy: a gitea.sh client (repos, credential-helper push, account picture from id/avatar.png, admin accounts and organizations) and a tested deploy recipe (rootless Gitea, nginx + certbot webroot, proxy-only firewall).

Self-host Block's Buzz (Nostr chat+git+agent workspace) - LIVE-VERIFIED on XIDAX: compose deploy, preflight gate, closed-relay membership, NIP-42 join-test tool, connect a claw

Diagnose failures when running an HTTP/WebSocket app behind Cloudflare (bot-challenge blocks non-browser clients, WebSocket proxying, test-through-the-edge)

Deployment guide + customer-intake onboarding playbook for TentClaw tents (sanitization pass)

Cloudflare DNS management skill: create/get/delete A records with strict IPv4 + FQDN validation

LunaNode edge proxy skill: wildcard TLS + nginx per-tenant provision/deprovision hooks + WebSocket upgrade + hardening

Container executor + provider routing (lunanode/xidax) + bootstrap-over-SSH + strict DNS-label validation + env-JSON result contract

Stands up a talkable tent on a fresh host: a per-tent Matrix homeserver (tuwunel), Element web, a fileserver, a control panel and the ROOT CLAW.

Provision and manage LunaNode VMs through the LunaNode JSON API: create, list, resize, snapshot and delete VMs, volumes, security groups, SSH keys, startup scripts and floating IPs.

Docker container operations for a TentClaw tent: launch recipe, recreate protocol, host bootstrap, tenant isolation policy and the container-provisioner API.