feat: initial commit with AGENTS, network topology, and mini-pc handoff

HANDOFF_mini-pc-openclaw.md

@@ -0,0 +1,37 @@
+# mini-pc-openclaw — Session Handoff
+
+**Last Session:** 2026-05-18_171921_mini-pc-openclaw
+**Model:** deepseek-v4-pro
+**Status:** complete
+**Updated:** 2026-05-18T17:19:21.294703
+
+## Summary
+Popravljen WireGuard tunel do mini-pc-ja (deepseek regenerisao kljuceve, novi peer 10.8.0.6). Postavljen Authelia SSO na oracle-vps za sve *.dzonicasa.xyz servise. Nginx prebacen sa basic auth na auth_request. Resetovan nginx password. Ocisceni logovi i docker. Azuriran docs portal i HANDOFF.md.
+
+## Key Decisions
+- Koristimo Authelia sa path-based routing na docs.dzonicasa.xyz/authelia/
+- Mini-pc WireGuard koristi nove kljuceve kao peer 10.8.0.6
+- Nginx auth_request koristi /api/verify endpoint (vraca 401)
+- SNAT/MASQUERADE na wg-easy za 192.168.0.0/24 saobracaj
+
+## Pending Tasks
+- [ ] Dodati swap na oracle-vps
+- [ ] Popraviti DNS resolving na oracle-vps hostu (trenutno static /etc/resolv.conf)
+- [ ] Restartovati certbot kontejner za SSL renewal
+
+## Network Topology
+See `_shared/contexts/network-topology.md` for full VPN/machine/credential map.
+- **Lenovo laptop** has Wolkabout office VPN config at `/etc/wireguard/njovanovic.conf`
+- Oracle VPS VPN is accessed through Wolkabout VPN (no separate config on lenovo)
+- **Duplicate file**: `/etc/wireguard/njovanovic.conf.conf` — same as `njovanovic.conf`, can be deleted
+
+## Files Touched
+- `oracle:~/nginx-proxy/conf.d/*.conf`
+- `oracle:~/authelia/configuration.yml`
+- `oracle:~/authelia/users.yml`
+- `oracle:~/docker_projects/vpn/etc_wireguard/wg0.conf`
+- `oracle:~/docker_projects/vpn/etc_wireguard/wg0.json`
+- `mini-pc:/etc/wireguard/wg0.conf`
+
+---
+*Auto-generated from session `2026-05-18_171921_mini-pc-openclaw`. Run `python3 .codex/save-session.py --handoff mini-pc-openclaw` to regenerate.*