When someone opens a terminal for this site, Hammerhead lists the session in the
site's config. The agent connects out to Hammerhead and joins that connection to
its own SSH server, so no port has to be open on an edge. The agent now reports
where its SSH server listens and that it can relay.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
A connection that never sends a byte is a probe (Hammerhead health-checks every
TCP resource that way), so it is no longer logged every 30 seconds.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
The program now lives in /usr/local/lib/bamboo and is owned by its service user so it can replace itself.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
The site agent: a WireGuard peer that dials out to each edge, accepts TCP
streams and native UDP datagrams inside the tunnel, lists local Docker
containers, and runs the local SMTP relay for mail egress. Split out of the
original single repository; depends on Reef for the shared types.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
VeillaxandClaude Sonnet 5.5
Veillax