docs(network-fabric): add Z890 GPU node Docker Compose override by POWERFULMOVES · Pull Request #897 · POWERFULMOVES/PMOVES.AI

POWERFULMOVES · 2026-03-13T05:06:25Z

Summary

Add pmoves/docker-compose.z890.override.yml for RTX 3090 Ti GPU node
Configure GPU-local services (Ollama, mesh-agent)
Disable main PC services (consumed via Tailscale MagicDNS)
Support profile-based multi-node deployment

Z890 GPU Node Configuration

Hardware

GPU: RTX 3090 Ti (24 GB VRAM)
Node Name: pmoves-3090ti
Node Type: gpu-desktop
Capabilities: cuda,rtx3090ti,24gb-vram

Local Services

pmoves-ollama: GPU-accelerated LLM inference
- Port: 11434 (bind to 0.0.0.0 for Tailscale access)
- GPU: NVIDIA_VISIBLE_DEVICES=0
mesh-agent: Distributed node announcer
- Announces to NATS every 15s
- No local container dependencies (NATS runs on main PC)

Disabled Services (Profiles: `[disabled]`)

All main PC services are disabled on Z890:

Data Tier: NATS, Qdrant, Neo4j, Meilisearch, MinIO
Supabase: DB, REST
LLM Gateway: TensorZero
Agents: Agent Zero, Archon
Workers: Extract, LangExtract, Notebook Sync, PDF Ingest
Media: PMOVES.YT, Publisher-Discord, Jellyfin Bridge

Usage

Start Z890 Services

make -C pmoves up-z890
# or manually:
docker compose -f docker-compose.yml -f docker-compose.gpu.yml \
  -f docker-compose.z890.override.yml --env-file env.z890 \
  --profile agents up -d pmoves-ollama mesh-agent

Access from Main PC

Ollama: http://pmoves-3090ti:11434 (via Tailscale MagicDNS)
Mesh Agent: Auto-discovered via NATS announcements

Phase 2 GPU Services (Future)

The override file includes commented-out configs for:

hi-rag-gateway-v2-gpu: GPU-accelerated hybrid RAG
ffmpeg-whisper: GPU-accelerated transcription

Test Plan

Verify Docker Compose syntax is valid
Test Z890 service bring-up
Verify Tailscale MagicDNS access to Ollama
Test mesh-agent NATS announcements

Context

Part of Network Fabric Activation — Multi-node GPU cluster deployment.

🤖 Generated with Claude Code

- Add pmoves/docker-compose.z890.override.yml for RTX 3090 Ti GPU node - Configure GPU-local services (Ollama, mesh-agent) - Disable main PC services (consumed via Tailscale MagicDNS) - Support profile-based multi-node deployment Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

chatgpt-codex-connector · 2026-03-13T05:06:31Z

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

coderabbitai · 2026-03-13T05:06:36Z

Warning

Rate limit exceeded

@POWERFULMOVES has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 5 minutes and 9 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 5603de86-9e45-485e-9762-565639500f5d

📥 Commits

Reviewing files that changed from the base of the PR and between 580c2fe and c917e81.

📒 Files selected for processing (1)

pmoves/docker-compose.z890.override.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch feat/network-fabric-docs-v2

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-03-13T05:06:47Z

Docker Hardening Validation

Hardening Validation Report

Validated: Fri Mar 13 05:06:45 UTC 2026

Services Checked

PMOVES.AI Docker Hardening Validation

[INFO] Checking: pmoves/docker-compose.hardened.yml

[INFO] Validating: hi-rag-gateway-v2
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: extract-worker
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: langextract
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: presign
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: render-webhook
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: retrieval-eval
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: pdf-ingest
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: jellyfin-bridge
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: invidious-companion-proxy
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: ffmpeg-whisper
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: media-video
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: media-audio
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: hi-rag-gateway-v2-gpu
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: hi-rag-gateway-gpu
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: deepresearch
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: supaserch
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: publisher-discord
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: mesh-agent
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: nats-echo-req
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: nats-echo-res
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: publisher
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: analysis-echo
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: graph-linker
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: comfy-watcher
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: grayjay-plugin-host
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: agent-zero
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: archon
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: channel-monitor
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: pmoves-yt
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: notebook-sync
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: supabase_service_role_key
[WARN] No user directive
[WARN] No read_only directive
[WARN] No cap_drop: ["ALL"]
[WARN] No no-new-privileges
[WARN] No resource limits

[INFO] Validating: supabase_jwt_secret
[WARN] No user directive
[WARN] No read_only directive
[WARN] No cap_drop: ["ALL"]
[WARN] No no-new-privileges
[WARN] No resource limits

======================================
Summary: 120 passed, 40 warnings, 0 errors

POWERFULMOVES merged commit c54e024 into main Mar 13, 2026
18 checks passed

POWERFULMOVES deleted the feat/network-fabric-docs-v2 branch March 13, 2026 06:21

Navigation Menu

docs(network-fabric): add Z890 GPU node Docker Compose override - #897

docs(network-fabric): add Z890 GPU node Docker Compose override#897
POWERFULMOVES merged 1 commit into
mainfrom
feat/network-fabric-docs-v2

POWERFULMOVES commented Mar 13, 2026

Uh oh!

chatgpt-codex-connector Bot commented Mar 13, 2026

Uh oh!

coderabbitai Bot commented Mar 13, 2026

Rate limit exceeded

Uh oh!

github-actions Bot commented Mar 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

POWERFULMOVES commented Mar 13, 2026

Summary

Z890 GPU Node Configuration

Hardware

Local Services

Disabled Services (Profiles: [disabled])

Usage

Start Z890 Services

Access from Main PC

Phase 2 GPU Services (Future)

Test Plan

Context

Uh oh!

chatgpt-codex-connector Bot commented Mar 13, 2026

Uh oh!

coderabbitai Bot commented Mar 13, 2026

Rate limit exceeded

Uh oh!

github-actions Bot commented Mar 13, 2026

Docker Hardening Validation

Hardening Validation Report

Validated: Fri Mar 13 05:06:45 UTC 2026

Services Checked

PMOVES.AI Docker Hardening Validation

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Disabled Services (Profiles: `[disabled]`)